CVE-2016-2502

HIGH · 7.8 CVSS Gepubliceerd: 11-07-2016 CWE-264

Beschrijving

drivers/usb/gadget/f_serial.c in the Qualcomm USB driver in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a large size in a GSER_IOCTL ioctl call, aka Android internal bug 27657963 and Qualcomm internal bug CR997044.

Vendors

Google

Affected products

Android

References

source.android.com
source.codeaurora.org