{"id":"CVE-2016-5342","aliases":["EUVD-2016-6293","GHSA-r2gf-cg95-782g","UBUNTU-CVE-2016-5342"],"status":"published","title":"Heap-based buffer overflow in the wcnss_wlan_write function in drivers/net/wireless/wcnss...","description":"Heap-based buffer overflow in the wcnss_wlan_write function in drivers/net/wireless/wcnss/wcnss_wlan.c in the wcnss_wlan device driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to cause a denial of service or possibly have unspecified other impact by writing to /dev/wcnss_wlan with an unexpected amount of data.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00511,"percentile":0.43865,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-787"],"published":"2016-08-30T17:00:00Z","modified":"2026-06-17T00:49:14Z","products":[{"vendor":"google","product":"android"},{"vendor":"linux","product":"linux_kernel"}],"references":[{"url":"https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=579e796cb089324c55e0e689a180575ba81b23d9","tags":["x_refsource_CONFIRM","x_transferred","Mailing List","Patch","Third Party Advisory","report"]},{"url":"http://www.securityfocus.com/bid/92693","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://source.android.com/security/bulletin/2016-10-01.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory"]},{"url":"https://www.codeaurora.org/buffer-overflow-vulnerability-wcnsswlanwrite-cve-2016-5342","tags":["x_refsource_CONFIRM","x_transferred","Broken Link","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5342"},{"url":"https://github.com/advisories/GHSA-r2gf-cg95-782g"},{"url":"https://ubuntu.com/security/CVE-2016-5342","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5342","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2016-5342","description":"Heap-based buffer overflow in the wcnss_wlan_write function in drivers/net/wireless/wcnss/wcnss_wlan.c in the wcnss_wlan device driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to cause a denial of service or possibly have unspecified other impact by writing to /dev/wcnss_wlan with an unexpected amount of data.","status":"published","published":"2016-08-30T17:00:00Z","modified":"2024-08-06T01:00:58.698Z","updated_at":"2026-11-02T14:33:31.117878Z"}],"euvd":[{"id":"EUVD-2016-6293","description":"Heap-based buffer overflow in the wcnss_wlan_write function in drivers/net/wireless/wcnss/wcnss_wlan.c in the wcnss_wlan device driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to cause a denial of service or possibly have unspecified other impact by writing to /dev/wcnss_wlan with an unexpected amount of data.","status":"published","published":"2016-08-30T17:00:00Z","modified":"2024-08-06T01:00:58Z","updated_at":"2026-11-03T02:22:42.996947Z"}],"ghsa":[{"id":"GHSA-r2gf-cg95-782g","title":"Heap-based buffer overflow in the wcnss_wlan_write function in drivers/net/wireless/wcnss...","description":"Heap-based buffer overflow in the wcnss_wlan_write function in drivers/net/wireless/wcnss/wcnss_wlan.c in the wcnss_wlan device driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to cause a denial of service or possibly have unspecified other impact by writing to /dev/wcnss_wlan with an unexpected amount of data.","status":"published","published":"2022-05-13T01:24:33Z","modified":"2023-02-01T05:07:31Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:50:33.423478Z"}],"nvd":[{"id":"CVE-2016-5342","description":"Heap-based buffer overflow in the wcnss_wlan_write function in drivers/net/wireless/wcnss/wcnss_wlan.c in the wcnss_wlan device driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to cause a denial of service or possibly have unspecified other impact by writing to /dev/wcnss_wlan with an unexpected amount of data.","status":"published","published":"2016-08-30T17:59:02.567Z","modified":"2026-06-17T00:49:14.763Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:03:28.854267Z"}],"osv":[{"id":"UBUNTU-CVE-2016-5342","description":"Heap-based buffer overflow in the wcnss_wlan_write function in drivers/net/wireless/wcnss/wcnss_wlan.c in the wcnss_wlan device driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to cause a denial of service or possibly have unspecified other impact by writing to /dev/wcnss_wlan with an unexpected amount of data.","status":"withdrawn","published":"2016-08-30T17:59:00Z","modified":"2025-07-16T07:34:45.524807Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:12.642042Z"}]}}