CVE-2016-2062 : The adreno_perfcounter_query_group function in drivers/gpu/msm/adreno

The adreno_perfcounter_query_group function in drivers/gpu/msm/adreno_perfcounter.c in the Adreno GPU driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, uses an incorrect integer data type, which allows attackers to cause a denial of service (integer overflow, heap-based buffer overflow, and incorrect memory allocation) or possibly have unspecified other impact via a crafted IOCTL_KGSL_PERFCOUNTER_QUERY ioctl call.

Published 2016-05-05 21:59:08

Updated 2020-08-03 16:03:40

Source MITRE

View at NVD, CVE.org

Vulnerability category: OverflowDenial of service

Products affected by CVE-2016-2062

Linux » Linux Kernel
Versions from including (>=) 3.0 and up to, including, (<=) 3.19.8
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Google » Nexus 5x Firmware » Version: N/A
cpe:2.3:o:google:nexus_5x_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Google » Nexus 5x » Version: N/A
Google » Nexus 6p Firmware » Version: N/A
cpe:2.3:o:google:nexus_6p_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Google » Nexus 6p » Version: N/A

Threat overview for CVE-2016-2062

Top countries where our scanners detected CVE-2016-2062

Top open port discovered on systems with this issue 49152

IPs affected by CVE-2016-2062 25,689

Threat actors abusing to this issue? Yes

Find out if you^* are affected by CVE-2016-2062!

^*Directly or indirectly through your vendors, service providers and 3rd parties. Powered by attack surface intelligence from SecurityScorecard.

Exploit prediction scoring system (EPSS) score for CVE-2016-2062

EPSS FAQ

0.06%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 23 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2016-2062

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.6	MEDIUM	AV:L/AC:L/Au:N/C:P/I:P/A:P	3.9	6.4	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	1.8	5.9	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2016-2062

CWE-190 Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2016-2062

http://source.android.com/security/bulletin/2016-06-01.html

Android Security Bulletin—June 2016 | Android Open Source Project
Patch;Vendor Advisory

CVEs referencing this url
https://codeaurora.org/cgit/quic/la/kernel/msm-3.18/commit/?id=27c95b64b2e4b5ff1288cbaa6e353dd803d71576

kernel/msm-3.18 - Unnamed repository; edit this file 'description' to name the repository.
Mailing List;Patch;Third Party Advisory
http://www.securitytracker.com/id/1035766

Android Adreno GPU Driver Buffer Overflow Lets Local Users Execute Arbitrary Code - SecurityTracker
Third Party Advisory;VDB Entry