CVE-2015-0571

The WLAN (aka Wi-Fi) driver for the Linux kernel 3.x and 4.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not verify authorization for private SET IOCTL calls, which allows attackers to gain privileges via a crafted application, related to wlan_hdd_hostapd.c and wlan_hdd_wext.c.

• CWE-862

• http://source.android.com/security/bulletin/2016-05-01.htmlVendor Advisory
• http://www.securityfocus.com/bid/77691Third Party Advisory, VDB Entry
• https://www.codeaurora.org/projects/security-advisories/multiple-issues-wlan-driver-allow-local-privilege-escalation-cve-2015Broken Link
• http://source.android.com/security/bulletin/2016-05-01.htmlVendor Advisory
• http://www.securityfocus.com/bid/77691Third Party Advisory, VDB Entry
• https://www.codeaurora.org/projects/security-advisories/multiple-issues-wlan-driver-allow-local-privilege-escalation-cve-2015Broken Link

Published

May 9, 2016

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-0563epan/dissectors/packet-smtp.c in the SMTP dissector in Wires…
• CVE-2015-0564Buffer underflow in the ssl_decrypt_record function in epan/…
• CVE-2015-0565NaCl in 2015 allowed the CLFLUSH instruction, making rowhamm…10
• CVE-2015-0568Use-after-free vulnerability in the msm_set_crop function in…7.8
• CVE-2015-0569Heap-based buffer overflow in the private wireless extension…7.8
• CVE-2015-0570Stack-based buffer overflow in the SET_WPS_IE IOCTL implemen…7.8
• CVE-2015-0572Multiple race conditions in drivers/char/adsprpc.c and drive…7
• CVE-2015-0573drivers/media/platform/msm/broadcast/tsc.c in the TSC driver…9.8
• CVE-2015-0574In all Qualcomm products with Android releases from CAF usin…
• CVE-2015-0575In all Qualcomm products with Android releases from CAF usin…
• CVE-2015-0576In all Qualcomm products with Android releases from CAF usin…
• CVE-2015-0577Multiple cross-site scripting (XSS) vulnerabilities in the I…