CVE-2016-3951 in Google Android

Summary

Double free vulnerability in drivers/net/usb/cdc_ncm.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service (system crash) or possibly have unspecified other impact by inserting a USB device with an invalid USB descriptor.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Reservation

04/05/2016

Disclosure

05/02/2016

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
91444	Google Android Kernel USB Driver double free	415	Not defined	Official fix	CVE-2016-3951
83148	Linux Kernel USB Descriptor cdc_ncm.c double free	415	Not defined	Official fix	CVE-2016-3951

Sources

• MITRE
• NVD
• CVE Details