CVE-2016-3893

MEDIUM

Qualcomm sound codec - Info Disclosure

Title source: llm

Description

The wcdcal_hwdep_ioctl_shared function in sound/soc/codecs/wcdcal-hwdep.c in the Qualcomm sound codec in Android before 2016-09-05 on Nexus 6P devices does not properly copy firmware data, which allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 29512527 and Qualcomm internal bug CR856400.

Exploits (1)

github WORKING POC 682 stars

by ScottyBauer · cpoc

https://github.com/ScottyBauer/Android_Kernel_CVE_POCs/tree/master/CVE-2016-3893.c

View Code ZIP pw:eip

References (4)

[Vendor Advisory] http://source.android.com/security/bulletin/2016-09-01.html

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id/1036763

[Issue Tracking, Patch] https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=a7a6ddc91cce7ad5ad55c9709b24bfc80f5ac873

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/92884

Scores

CVSS v3 5.5

EPSS 0.0011

EPSS Percentile 29.4%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Classification

CWE

CWE-200

Status published

Affected Products (2)

google/android < 7.0

n/a/n/a

Timeline

Published Sep 11, 2016

Tracked Since Feb 18, 2026