CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.5. It affects Android.
CVE
CVE-2016-3893
Severity
MEDIUM
CVSS
5.5
EPSS
0.50%
Android
Original NVD Description
The wcdcal_hwdep_ioctl_shared function in sound/soc/codecs/wcdcal-hwdep.c in the Qualcomm sound codec in Android before 2016-09-05 on Nexus 6P devices does not properly copy firmware data, which allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 29512527 and Qualcomm internal bug CR856400.