VulnerabilityModified

CVE-2016-2062

HIGH 7.8EPSS 0.21%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.21%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

The adreno_perfcounter_query_group function in drivers/gpu/msm/adreno_perfcounter.c in the Adreno GPU driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, uses an incorrect integer data type, which allows attackers to cause a denial of service (integer overflow, heap-based buffer overflow, and incorrect memory allocation) or possibly have unspecified other impact via a crafted IOCTL_KGSL_PERFCOUNTER_QUERY ioctl call.

CVSS 3.1: 7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS: 0.21% probability · 11th percentile
CISA KEV: Not listed
Weakness: CWE-190
Affected: linux/linux kernel · google/nexus 5x firmware · google/nexus 6p firmware
Source: cve@mitre.org

References

http://source.android.com/security/bulletin/2016-06-01.htmlPatch, Vendor Advisory
http://www.securitytracker.com/id/1035766Third Party Advisory, VDB Entry
https://codeaurora.org/cgit/quic/la/kernel/msm-3.18/commit/?id=27c95b64b2e4b5ff1288cbaa6e353dd803d71576Mailing List, Patch, Third Party Advisory
https://www.codeaurora.org/buffer-overflow-adreno-gpu-msm-driver-cve-2016-2062Broken Link
http://source.android.com/security/bulletin/2016-06-01.htmlPatch, Vendor Advisory
http://www.securitytracker.com/id/1035766Third Party Advisory, VDB Entry
https://codeaurora.org/cgit/quic/la/kernel/msm-3.18/commit/?id=27c95b64b2e4b5ff1288cbaa6e353dd803d71576Mailing List, Patch, Third Party Advisory
https://www.codeaurora.org/buffer-overflow-adreno-gpu-msm-driver-cve-2016-2062Broken Link

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.