01 Record

CVE-2016-5342

Heap-based buffer overflow in the wcnss_wlan_write function in drivers/net/wireless/wcnss/wcnss_wlan.c in the wcnss_wlan device driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center

UnratedPUBLISHEDCNA: mitre

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

Heap-based buffer overflow in the wcnss_wlan_write function in drivers/net/wireless/wcnss/wcnss_wlan.c in the wcnss_wlan device driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.51% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 43.3% of scored records. A rank, not a probability.
NVD base score: 7.8 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-06-17.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2016-08-30 17:00Z10 YR AGO

Last updated

2024-08-06 01:00Z2 YR AGO

Reserved

2016-06-09

Assigning CNA

mitre

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-787Out-of-bounds WriteBase
CWE-122Heap-based Buffer OverflowVariant

Data version

5.1

Document digest

09309779f46e6a698c8a62a07930ac1395d90bcf3e27dbc1828161fa1ef9ef1a

05 Affected products

VendorProductVersionsPlatforms

googleandroidNot specified—

linuxlinux_kernelNot specified—

redhatenterprise_linuxNot specified—

redhatenterprise_mrgNot specified—

06 References

source.codeaurora.orghttps://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=579e796cb089324c55e0e689a180575ba81b23d9x_refsource_CONFIRM
www.securityfocus.com92693http://www.securityfocus.com/bid/92693vdb-entryx_refsource_BID
source.android.comhttp://source.android.com/security/bulletin/2016-10-01.htmlx_refsource_CONFIRM
www.codeaurora.orghttps://www.codeaurora.org/buffer-overflow-vulnerability-wcnsswlanwrite-cve-2016-5342x_refsource_CONFIRM