Vulnerabilities > CVE-2016-2474 - Privilege Escalation vulnerability in Google Nexus Qualcomm Wi-Fi Driver

CVSS 9.3 - CRITICAL

Attack vector

NETWORK

Attack complexity

MEDIUM

Privileges required

NONE

Confidentiality impact

COMPLETE

Integrity impact

COMPLETE

Availability impact

COMPLETE

network

google

critical

NVD

Published: 2016-06-13

Updated: 2016-06-14

Summary

The Qualcomm Wi-Fi driver in Android before 2016-06-01 on Nexus 5X devices allows attackers to gain privileges via a crafted application, aka internal bug 27424603.

Vulnerable Configurations

Part	Description	Count
OS	Google Google Android - Google Android 1.0 Google Android 1.1 Google Android 1.5 Google Android 1.6 Google Android 2.0 Google Android 2.0.1 Google Android 2.1 Google Android 2.2 Google Android 2.2.1 Google Android 2.2.2 Google Android 2.2.3 Google Android 2.3 Google Android 2.3.1 Google Android 2.3.2 Google Android 2.3.3 Google Android 2.3.4 Google Android 2.3.5 Google Android 2.3.6 Google Android 2.3.7 Google Android 3.0 Google Android 3.1 Google Android 3.2 Google Android 3.2.1 Google Android 3.2.2 Google Android 3.2.4 Google Android 3.2.6 Google Android 4.0 Google Android 4.0.1 Google Android 4.0.2 Google Android 4.0.3 Google Android 4.0.4 Google Android 4.1 Google Android 4.1.1 Google Android 4.1.2 Google Android 4.2 Google Android 4.2.1 Google Android 4.2.2 Google Android 4.3 Google Android 4.3.1 Google Android 4.4 Google Android 4.4.1 Google Android 4.4.2 Google Android 4.4.3 Google Android 4.4.4 Google Android 5.0 Google Android 5.0.1 Google Android 5.0.2 Google Android 5.1 Google Android 5.1.0 Google Android 5.1.1 Google Android 6.0 Google Android 6.0.1	55

References

http://source.android.com/security/bulletin/2016-06-01.html