CVE-2016-10391 In all Qualcomm products with Android releases from CAF using the Linux kernel, the length in an HCI command is not properly checked for validity.
CriticalCVSS 9.8
EPSS 0.90%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In all Qualcomm products with Android releases from CAF using the Linux kernel, the length in an HCI command is not properly checked for validity.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Google Android | All versions | No fix listed |
| qualcomm All Qualcomm products | = All Android releases from CAF using the Linux kernel | No fix listed |
References
- 99467 third-party-advisory vdb-entry
- source.android.com vendor-advisory