{"id":"CVE-2016-5862","aliases":["EUVD-2016-6796","GHSA-9v9m-grrv-xcjm"],"status":"published","title":"When a control related to codec is issued from userspace in all Qualcomm products with Android...","description":"When a control related to codec is issued from userspace in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, the type casting is done to the container structure instead of the codec's individual structure, resulting in a device restart after kernel crash occurs.","severity":{"version":"3.0","score":7,"vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00527,"percentile":0.44927,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-264"],"published":"2017-08-16T15:00:00Z","modified":"2026-06-17T00:50:11Z","products":[{"vendor":"google","product":"android"},{"vendor":"qualcomm, inc.","product":"all qualcomm products"}],"references":[{"url":"http://www.securityfocus.com/bid/98194","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://source.codeaurora.org/quic/la//kernel/msm-4.4/commit/?id=4199451e83729a3add781eeafaee32994ff65b04","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://source.android.com/security/bulletin/2017-05-01","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5862"},{"url":"https://github.com/advisories/GHSA-9v9m-grrv-xcjm"}],"sources":{"cve":[{"id":"CVE-2016-5862","description":"When a control related to codec is issued from userspace in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, the type casting is done to the container structure instead of the codec's individual structure, resulting in a device restart after kernel crash occurs.","status":"published","published":"2017-08-16T15:00:00Z","modified":"2024-09-16T23:36:34.694Z","updated_at":"2026-11-02T14:33:31.117878Z"}],"euvd":[{"id":"EUVD-2016-6796","description":"When a control related to codec is issued from userspace in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, the type casting is done to the container structure instead of the codec's individual structure, resulting in a device restart after kernel crash occurs.","status":"published","published":"2017-08-16T15:00:00Z","modified":"2024-09-16T23:36:34Z","updated_at":"2026-11-03T00:54:48.722382Z"}],"ghsa":[{"id":"GHSA-9v9m-grrv-xcjm","title":"When a control related to codec is issued from userspace in all Qualcomm products with Android...","description":"When a control related to codec is issued from userspace in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, the type casting is done to the container structure instead of the codec's individual structure, resulting in a device restart after kernel crash occurs.","status":"published","published":"2022-05-17T01:59:09Z","modified":"2023-02-03T05:06:53Z","cvss":[{"version":"3.0","score":7,"vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T14:53:57.460736Z"}],"nvd":[{"id":"CVE-2016-5862","description":"When a control related to codec is issued from userspace in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, the type casting is done to the container structure instead of the codec's individual structure, resulting in a device restart after kernel crash occurs.","status":"published","published":"2017-08-16T15:29:00.47Z","modified":"2026-06-17T00:50:11.333Z","cvss":[{"version":"3.0","score":7,"vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.6,"vector":"AV:N/AC:H/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:03:39.176887Z"}]}}