CVE-2016-2068 describes an integer overflow and subsequent buffer overflow or over-read vulnerability in the Qualcomm MSM QDSP6 audio driver for Linux kernel 3.x, affecting Google Android and Linux kernel products. This flaw allows a crafted application to achieve privilege escalation or a denial of service through AUDIO_EFFECTS_WRITE or AUDIO_EFFECTS_READ operations. With a CVSS score of 7.8 (High), it requires user interaction (UI:R) and local access (AV:L) but can lead to high confidentiality, integrity, and availability impacts (C:H/I:H/A:H). There is no evidence of active exploitation, publicly available exploit code in Metasploit or ExploitDB, and minimal community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 6.0.1CPE matchmatch criteria | cpe:2.3:o:google:android:*:*:*:*:*:*:*:* | ||
>= 3.0, <= 3.19.8CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.