What’s Vulnerable › Vulnerabilities

CVE-2016-5347

• Severity: medium (CVSS 4.7 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-08-16 · updated 2026-06-17
• Weakness: CWE-200

Description

In all Qualcomm products with Android releases from CAF using the Linux kernel, kernel stack data can be leaked to userspace by an audio driver.

Affected products

• Android: all versions

References

• http://www.securityfocus.com/bid/98218
• https://source.android.com/security/bulletin/2017-05-01
• https://source.codeaurora.org/quic/la//kernel/msm-4.4/commit/?id=f14390f13e62460fc6b05fc0acde0e825374fdb6
• https://www.codeaurora.org/uninitialized-channel-map-array-can-leak-data-user-space-qdsp6v2-driver-cve-2016-5347
• http://www.securityfocus.com/bid/98218
• https://source.android.com/security/bulletin/2017-05-01
• https://source.codeaurora.org/quic/la//kernel/msm-4.4/commit/?id=f14390f13e62460fc6b05fc0acde0e825374fdb6
• https://www.codeaurora.org/uninitialized-channel-map-array-can-leak-data-user-space-qdsp6v2-driver-cve-2016-5347

Get alerted when CVE-2016-5347 or the next vulnerability affects your stack