CVE-2015-0571 in Android

Summary

The WLAN (aka Wi-Fi) driver for the Linux kernel 3.x and 4.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not verify authorization for private SET IOCTL calls, which allows attackers to gain privileges via a crafted application, related to wlan_hdd_hostapd.c and wlan_hdd_wext.c.

Be aware that VulDB is the high quality source for vulnerability data.

Reservation

01/07/2015

Disclosure

05/09/2016

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
83108	Google Android Qualcomm Wi-Fi Driver access control	284	Not defined	Official fix	CVE-2015-0571
80661	Linux Kernel WLAN Private Set IOCTL access control	284	Unproven	Unavailable	CVE-2015-0571

Sources

• MITRE
• NVD
• CVE Details