Exploitation Summary
EIP tracks 1 public exploit for CVE-2016-3868. PoCs published by ScottyBauer.
AI-analyzed exploit summary This PoC exploits CVE-2016-3868 by writing a malformed string to the Qualcomm MSM kernel debug interface, triggering a buffer overflow in the ptable driver. The exploit targets Android devices with vulnerable Qualcomm kernels, leading to a denial-of-service (DoS) or potential privilege escalation.
Description
The Qualcomm power driver in Android before 2016-09-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28967028 and Qualcomm internal bug CR1032875.
Exploits (1)
This PoC exploits CVE-2016-3868 by writing a malformed string to the Qualcomm MSM kernel debug interface, triggering a buffer overflow in the ptable driver. The exploit targets Android devices with vulnerable Qualcomm kernels, leading to a denial-of-service (DoS) or potential privilege escalation.
References (3)
Scores
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H