CVE-2016-3874

CORE/HDD/src/wlan_hdd_wext.c in the Qualcomm Wi-Fi driver in Android before 2016-09-05 on Nexus 5X devices does not properly validate the arguments array, which allows attackers to gain privileges via a crafted application that sends a WE_UNIT_TEST_CMD command, aka Android internal bug 29944562 and Qualcomm internal bug CR997797.

• CWE-264

• http://source.android.com/security/bulletin/2016-09-01.htmlVendor Advisory
• http://www.securityfocus.com/bid/92882
• http://www.securitytracker.com/id/1036763
• https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=50e8f265b3f7926aeb4e49c33f7301ace89faa77Issue Tracking, Patch
• https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=a3974e61c960aadcc147c3c5704a67309171642dIssue Tracking, Patch
• http://source.android.com/security/bulletin/2016-09-01.htmlVendor Advisory
• http://www.securityfocus.com/bid/92882
• http://www.securitytracker.com/id/1036763
• https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=50e8f265b3f7926aeb4e49c33f7301ace89faa77Issue Tracking, Patch
• https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=a3974e61c960aadcc147c3c5704a67309171642dIssue Tracking, Patch

Published

Sep 11, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-3868The Qualcomm power driver in Android before 2016-09-05 on Ne…
• CVE-2016-3869The Broadcom Wi-Fi driver in Android before 2016-09-05 on Ne…
• CVE-2016-3870omx/SimpleSoftOMXComponent.cpp in libstagefright in mediaser…
• CVE-2016-3871Multiple buffer overflows in codecs/mp3dec/SoftMP3.cpp in li…
• CVE-2016-3872Buffer overflow in codecs/on2/dec/SoftVPX.cpp in libstagefri…
• CVE-2016-3873The NVIDIA kernel in Android before 2016-09-05 on Nexus 9 de…
• CVE-2016-3875server/wm/WindowManagerService.java in Android 6.x before 20…
• CVE-2016-3876providers/settings/SettingsProvider.java in Android 6.x befo…
• CVE-2016-3877Unspecified vulnerability in Android before 2016-09-01 has u…
• CVE-2016-3878decoder/ih264d_api.c in mediaserver in Android 6.x before 20…
• CVE-2016-3879arm-wt-22k/lib_src/eas_mdls.c in mediaserver in Android 4.x …
• CVE-2016-3880Multiple buffer overflows in rtsp/ASessionDescription.cpp in…