Back to CVE Browser

CVE-2016-5344

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.1520%

EPSS Percentile30.67th

PublishedAug 30, 2016

Last ModifiedMay 6, 2026

Vulnerability Description

Multiple integer overflows in the MDSS driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allow attackers to cause a denial of service or possibly have unspecified other impact via a large size value, related to mdss_compat_utils.c, mdss_fb.c, and mdss_rotator.c.

Affected Platforms (CPE)

💻

Google

Android

<= 7.0

💻

Linux

Linux Kernel

>= 3.0 and <= 3.19.8

References & Advisories

🔗 http://source.android.com/security/bulletin/2016-10-01.html

🔗 http://www.securityfocus.com/bid/92695

🔗 https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=1d2297267c24f2c44bd0ecb244ddb8bc880a29b7

🔗 https://www.codeaurora.org/integer-overflow-mdss-driver-cve-2016-5344

🔗 http://source.android.com/security/bulletin/2016-10-01.html

🔗 http://www.securityfocus.com/bid/92695

🔗 https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=1d2297267c24f2c44bd0ecb244ddb8bc880a29b7

🔗 https://www.codeaurora.org/integer-overflow-mdss-driver-cve-2016-5344

Related Vulnerabilities

CVE-2012-525410.0

Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 ...

CVE-2012-525510.0

Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 ...

CVE-2019-1106310.0

A broken access control vulnerability in SmartHome app (Android versions up to 3.0.42_190515, ios versions up to 2.0.22) allows an...

CVE-2012-525610.0

Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11....