CVE-2016-5349

CVE-2016-5349 describes a privilege escalation vulnerability affecting Google Android devices utilizing Qualcomm Secure Execution Environment (QSEE). The flaw stems from QSEE failing to adequately verify memory addresses provided by the High Level Operating System (HLOS), allowing secure applications to potentially write to HLOS kernel space instead of legitimate user space. Rated Medium (CVSS 5.5), this vulnerability requires user interaction and local access, but could lead to high confidentiality impact. There is no known active exploitation, public exploit code, or significant community discussion surrounding this CVE.