CVE-2016-10460 In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 835, SD 845, and SD 850, vendor specific opcodes may not have any packet length validation leading to buff...
CriticalCVSS 9.8
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 835, SD 845, and SD 850, vendor specific opcodes may not have any packet length validation leading to buffer over-reads.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| qualcomm sd 835 firmware | All versions | No fix listed |
| qualcomm sd 845 firmware | All versions | No fix listed |
| qualcomm sd 850 firmware | All versions | No fix listed |
| qualcomm Snapdragon Mobile | = SD 835, SD 845, SD 850 | No fix listed |
References
- 103671 third-party-advisory vdb-entry
- source.android.com vendor-advisory