CVE-2016-2061 Integer overflow in n/a
Attackers can gain privileges or cause denial of service via a crafted application exploiting an integer signedness error in the MSM V4L2 video driver.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2016-2061?
CVE-2016-2061 is a high-severity vulnerability in Linux kernel, published on 13 Jun 2016. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
Integer signedness error in the MSM V4L2 video driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to gain privileges or cause a denial of service (array overflow and memory corruption) via a crafted application that triggers an msm_isp_axi_create_stream call.
Weakness: CWE-269
Which versions are affected by CVE-2016-2061?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2016-2061?
No fix has been published for CVE-2016-2061 yet. Limit exposure of the affected software until one is available.
Is CVE-2016-2061 being exploited?
There is no known exploitation of CVE-2016-2061 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as GHSA-7ggx-433r-mhfg.