Critical severity · published Aug 30, 2016
CVE-2016-5344
Multiple integer overflows in the MDSS driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products,…
9.8
CVSS
1.7%
EPSS
No
On KEV
Description
Multiple integer overflows in the MDSS driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allow attackers to cause a denial of service or possibly have unspecified other impact via a large size value, related to mdss_compat_utils.c, mdss_fb.c, and mdss_rotator.c.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 78% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AN
Android · Google
through 7.0 · source: NVD
KE
Kernel · Linux
3.0 through 3.19.8 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-5344
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-5344
Patch
http://source.android.com/security/bulletin/2016-10-01.html
Third Party Advisory
http://www.securityfocus.com/bid/92695
Mailing List
https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=1d2297267c24f2c44bd0ecb244ddb8bc880a29b7
Broken Link
https://www.codeaurora.org/integer-overflow-mdss-driver-cve-2016-5344
More from Android
9.6
CVE-2020-16010
Google Chrome for Android UI Heap Buffer Overflow Vulnerability
8.8
CVE-2026-58704
Google Pixel Improper Authorization Vulnerability
8.8
CVE-2025-48543
Android Runtime Use-After-Free Vulnerability
8.4
CVE-2025-48595
Android Framework Integer Overflow Vulnerability
7.8
CVE-2025-48572
Android Framework Privilege Escalation Vulnerability