CVE-2016-10442 In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9640, SDM630, MSM8976, MSM8937, SDM845, MSM8976, and MSM8952, when running module or kernel code with impr...
CriticalCVSS 9.8
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9640, SDM630, MSM8976, MSM8937, SDM845, MSM8976, and MSM8952, when running module or kernel code with improper access control allowing writing to arbitrary regions of memory, the user may utilize this vector to alter module executable code.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| qualcomm mdm9640 firmware | All versions | No fix listed |
| qualcomm sdm630 firmware | All versions | No fix listed |
| qualcomm mdm9650 firmware | All versions | No fix listed |
| qualcomm msm8976 firmware | All versions | No fix listed |
| qualcomm msm8937 firmware | All versions | No fix listed |
| qualcomm sdm845 firmware | All versions | No fix listed |
| qualcomm msm8952 firmware | All versions | No fix listed |
| qualcomm Snapdragon Mobile | = MDM9640, SDM630, MSM8976, MSM8937, SDM845, MSM8976, MSM8952 | No fix listed |
References
- 103671 third-party-advisory vdb-entry
- source.android.com vendor-advisory