CVE-2016-5856

Name: CVE-2016-5856
Creator: NVD / NIST
Published: 2017-04-12T22:59:00.677+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 0.59%

Last modified Jun 17, 2026

CVE-2016-5856 is a vulnerability of currently unknown severity. Drivers/soc/qcom/spcom.c in the Qualcomm SPCom driver in the Android kernel 2017-03-05 allows local users to gain privileges, a different vulnerability than CVE-2016-5857.. EPSS estimates a 0.59% chance of exploitation in the next 30 days.

Description

Drivers/soc/qcom/spcom.c in the Qualcomm SPCom driver in the Android kernel 2017-03-05 allows local users to gain privileges, a different vulnerability than CVE-2016-5857.

Metrics

EPSS Probability

0.59%

43.6th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-264

Affected Software

Vendor	Product	Versions
Linux	Linux Kernel	4.3.6
Google	Android	<= 6.0.1

References

http://www.securitytracker.com/id/1037968Third Party Advisory, VDB Entry
https://source.android.com/security/bulletin/2017-03-01Vendor Advisory
https://source.codeaurora.org/quic/la/kernel/msm-4.4/commit/?id=0c0622914ba53cdcb6e79e85f64bfdf7762c0368Issue Tracking, Patch, Third Party Advisory
http://www.securitytracker.com/id/1037968Third Party Advisory, VDB Entry
https://source.android.com/security/bulletin/2017-03-01Vendor Advisory
https://source.codeaurora.org/quic/la/kernel/msm-4.4/commit/?id=0c0622914ba53cdcb6e79e85f64bfdf7762c0368Issue Tracking, Patch, Third Party Advisory

Timeline

Published: Apr 12, 2017
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2016-5856?

Drivers/soc/qcom/spcom.c in the Qualcomm SPCom driver in the Android kernel 2017-03-05 allows local users to gain privileges, a different vulnerability than CVE-2016-5857.

How severe is CVE-2016-5856?

Severity scoring for CVE-2016-5856 is pending analysis. The EPSS model estimates a 0.59% probability of exploitation in the next 30 days.

How do I fix CVE-2016-5856?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2016-5856?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST