CVE-2016-2066 Integer overflow in n/a
Attackers can gain privileges or cause denial of service via memory corruption in the Linux kernel MSM QDSP6 audio driver using a crafted application.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2016-2066?
CVE-2016-2066 is a high-severity vulnerability in Linux kernel, published on 13 Jun 2016. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
Integer signedness error in the MSM QDSP6 audio driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to gain privileges or cause a denial of service (memory corruption) via a crafted application that makes an ioctl call.
Weakness: CWE-269
Which versions are affected by CVE-2016-2066?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2016-2066?
No fix has been published for CVE-2016-2066 yet. Limit exposure of the affected software until one is available.
Is CVE-2016-2066 being exploited?
There is no known exploitation of CVE-2016-2066 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as GHSA-92gv-9r9q-6vxp.