CVE-2016-5853

In an audio driver in all Qualcomm products with Android releases from CAF using the Linux kernel, when a sanity check encounters a length value not in the correct range, an error message is printed, but code execution continues in the same way as for a correct length value.

• CWE-264

• http://www.securityfocus.com/bid/98178Third Party Advisory, VDB Entry
• https://source.android.com/security/bulletin/2017-05-01Patch, Vendor Advisory
• https://source.codeaurora.org/quic/la//kernel/msm-4.4/commit/?id=a8f3b894de319718aecfc2ce9c691514696805beIssue Tracking, Patch, Third Party Advisory
• https://www.codeaurora.org/detection-error-condition-without-proper-action-msmds2dapparamvisualizercontrolget-cve-2016-5853
• http://www.securityfocus.com/bid/98178Third Party Advisory, VDB Entry
• https://source.android.com/security/bulletin/2017-05-01Patch, Vendor Advisory
• https://source.codeaurora.org/quic/la//kernel/msm-4.4/commit/?id=a8f3b894de319718aecfc2ce9c691514696805beIssue Tracking, Patch, Third Party Advisory
• https://www.codeaurora.org/detection-error-condition-without-proper-action-msmds2dapparamvisualizercontrolget-cve-2016-5853

Published

Aug 16, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-5847SAP SAPCAR allows local users to change the permissions of a…
• CVE-2016-5848Siemens SICAM PAS before 8.07 does not properly restrict pas…6.7
• CVE-2016-5849Siemens SICAM PAS through 8.07 allows local users to obtain …2.5
• CVE-2016-5850Cross-site scripting (XSS) vulnerability in the volume backu…
• CVE-2016-5851python-docx before 0.8.6 allows context-dependent attackers …8.8
• CVE-2016-5852For the NVIDIA Quadro, NVS, and GeForce products, GFE GameSt…
• CVE-2016-5854In a driver in all Qualcomm products with Android for MSM, F…
• CVE-2016-5855In a driver in all Qualcomm products with Android for MSM, F…
• CVE-2016-5856Drivers/soc/qcom/spcom.c in the Qualcomm SPCom driver in the…
• CVE-2016-5857The Qualcomm SPCom driver in Android before 7.0 allows local…
• CVE-2016-5858In an ioctl handler in all Qualcomm products with Android fo…
• CVE-2016-5859In a sound driver in all Qualcomm products with Android for …