CVE-2016-5340

The is_ashmem_file function in drivers/staging/android/ashmem.c in a certain Qualcomm Innovation Center (QuIC) Android patch for the Linux kernel 3.x mishandles pointer validation within the KGSL Linux Graphics Module, which allows attackers to bypass intended access restrictions by using the /ashmem string as the dentry name.

• CWE-20

• http://source.android.com/security/bulletin/2016-10-01.htmlThird Party Advisory
• http://www.securityfocus.com/bid/92374Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1036763Third Party Advisory, VDB Entry
• https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=06e51489061e5473b4e2035c79dcf7c27a6f75a6Mailing List, Patch, Third Party Advisory
• https://www.codeaurora.org/invalid-path-check-ashmem-memory-file-cve-2016-5340Broken Link
• http://source.android.com/security/bulletin/2016-10-01.htmlThird Party Advisory
• http://www.securityfocus.com/bid/92374Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1036763Third Party Advisory, VDB Entry
• https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=06e51489061e5473b4e2035c79dcf7c27a6f75a6Mailing List, Patch, Third Party Advisory
• https://www.codeaurora.org/invalid-path-check-ashmem-memory-file-cve-2016-5340Broken Link

Published

Aug 7, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-5333VMware Photos OS OVA 1.0 before 2016-08-14 has a default SSH…
• CVE-2016-5334VMware Identity Manager 2.x before 2.7.1 and vRealize Automa…5.3
• CVE-2016-5335VMware Identity Manager 2.x before 2.7 and vRealize Automati…7.8
• CVE-2016-5336VMware vRealize Automation 7.0.x before 7.1 allows remote at…
• CVE-2016-5337The megasas_ctrl_get_info function in hw/scsi/megasas.c in Q…5.5
• CVE-2016-5338The (1) esp_reg_read and (2) esp_reg_write functions in hw/s…7.8
• CVE-2016-5341The GPS component in Android before 2016-12-05 allows man-in…
• CVE-2016-5342Heap-based buffer overflow in the wcnss_wlan_write function …7.8
• CVE-2016-5343drivers/soc/qcom/qdsp6v2/voice_svc.c in the QDSP6v2 Voice Se…9.8
• CVE-2016-5344Multiple integer overflows in the MDSS driver for the Linux …9.8
• CVE-2016-5345Buffer overflow in the Qualcomm radio driver in Android befo…
• CVE-2016-5346An Information Disclosure vulnerability exists in the Google…5.5