CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 9.3
CWE Name:  Permissions Privileges and Access Controls
Summary: core/hdd/src/wlan_hdd_wext.c in the qualcomm wi-fi driver in android before 2016-09-05 on nexus 5x devices does not properly validate the arguments array, which allows attackers to gain privileges via a crafted application that sends a we_unit_test_cmd command, aka android internal bug 29944562 and qualcomm internal bug cr997797.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2016-09-11
Last Modified Date: 2017-08-13