Stack overflow in function bus_floor_vote_store_api of msm_bus driver (CVE-2016-3904)
Release Date:
November 30, 2016
Affected Projects:
Android for MSMFirefox OS for MSMQRD Android
Advisory ID:
QCIR-2016-00061-1
CVE ID(s):
Summary:
The following security vulnerabilities have been identified: CVE-2016-3904 Current bus_floor_vote_store_api does not limit/check the size of the string in input, allowing stack overflow.
Access Vector: Local
Security Risk: Medium
Access Vector: Local
Affected Versions:
All Android releases from CAF using the Linux kernel.
Patch:
We advise customers to apply the following patches:
Individual Patches
- CVE-2016-3904: https://www.codeaurora.org/gitweb/quic/la/?p=kernel/msm-3.18.git;a=commit;h=069683407ca9a820d05c914b57c587bcd3f16a3a
Acknowledgement:
This issue was reported to Google by an external security researcher. Qualcomm Innovation Center, Inc. (QuIC) thanks Google for bringing this issue to QuIC's attention.
Revisions:
Initial
Contact:
security-advisory@quicinc.com