CVE-2016-2066

Integer signedness error in the MSM QDSP6 audio driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to gain privileges or cause a denial of service (memory corruption) via a crafted application that makes an ioctl call.

• CWE-269

• http://source.android.com/security/bulletin/2016-06-01.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/bid/91046Third Party Advisory, VDB Entry
• https://us.codeaurora.org/cgit/quic/la/kernel/msm-3.18/commit/?id=775fca8289eff931f91ff6e8c36cf2034ba59e88Mailing List, Patch, Third Party Advisory
• https://www.codeaurora.org/multiple-vulnerabilities-msm-qdsp6-audio-driver-allow-kernel-memory-corruption-cve-2016-2064-cveBroken Link
• http://source.android.com/security/bulletin/2016-06-01.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/bid/91046Third Party Advisory, VDB Entry
• https://us.codeaurora.org/cgit/quic/la/kernel/msm-3.18/commit/?id=775fca8289eff931f91ff6e8c36cf2034ba59e88Mailing List, Patch, Third Party Advisory
• https://www.codeaurora.org/multiple-vulnerabilities-msm-qdsp6-audio-driver-allow-kernel-memory-corruption-cve-2016-2064-cveBroken Link

Published

Jun 13, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-2060server/TetherController.cpp in the tethering controller in n…
• CVE-2016-2061Integer signedness error in the MSM V4L2 video driver for th…7.8
• CVE-2016-2062The adreno_perfcounter_query_group function in drivers/gpu/m…7.8
• CVE-2016-2063Stack-based buffer overflow in the supply_lm_input_write fun…7.8
• CVE-2016-2064sound/soc/msm/qdsp6v2/msm-audio-effects-q6-v2.c in the MSM Q…7.8
• CVE-2016-2065sound/soc/msm/qdsp6v2/msm-audio-effects-q6-v2.c in the MSM Q…7.8
• CVE-2016-2067drivers/gpu/msm/kgsl.c in the MSM graphics driver (aka GPU d…7.8
• CVE-2016-2068The MSM QDSP6 audio driver (aka sound driver) for the Linux …7.8
• CVE-2016-2069Race condition in arch/x86/mm/tlb.c in the Linux kernel befo…
• CVE-2016-2070The tcp_cwnd_reduction function in net/ipv4/tcp_input.c in t…7.5
• CVE-2016-2071Citrix NetScaler Application Delivery Controller (ADC) and N…
• CVE-2016-2072The Administrative Web Interface in Citrix NetScaler Applica…