CVE-2016-10474 In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 20...
CriticalCVSS 9.8
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, and SD 850, if the buffer length passed to the RIL interface is too large, the buffer size calculation may overflow, resulting in an undersize allocation for the buffer, and subsequently buffer overwrite.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| qualcomm mdm9206 firmware | All versions | No fix listed |
| qualcomm mdm9607 firmware | All versions | No fix listed |
| qualcomm ipq4019 firmware | All versions | No fix listed |
| qualcomm mdm9650 firmware | All versions | No fix listed |
| qualcomm msm8909w firmware | All versions | No fix listed |
| qualcomm sd 210 firmware | All versions | No fix listed |
| qualcomm sd 212 firmware | All versions | No fix listed |
| qualcomm sd 205 firmware | All versions | No fix listed |
| qualcomm sd 410 firmware | All versions | No fix listed |
| qualcomm sd 412 firmware | All versions | No fix listed |
| qualcomm sd 425 firmware | All versions | No fix listed |
| qualcomm sd 430 firmware | All versions | No fix listed |
| qualcomm sd 450 firmware | All versions | No fix listed |
| qualcomm sd 615 firmware | All versions | No fix listed |
| qualcomm sd 616 firmware | All versions | No fix listed |
| qualcomm sd 415 firmware | All versions | No fix listed |
| qualcomm sd 617 firmware | All versions | No fix listed |
| qualcomm sd 625 firmware | All versions | No fix listed |
| qualcomm sd 650 firmware | All versions | No fix listed |
| qualcomm sd 652 firmware | All versions | No fix listed |
| qualcomm sd 820a firmware | All versions | No fix listed |
| qualcomm sd 808 firmware | All versions | No fix listed |
| qualcomm sd 810 firmware | All versions | No fix listed |
| qualcomm sd 820 firmware | All versions | No fix listed |
| qualcomm sd 835 firmware | All versions | No fix listed |
Show 3 more
| Product | Affected versions | Fixed in |
|---|---|---|
| qualcomm sd 845 firmware | All versions | No fix listed |
| qualcomm sd 850 firmware | All versions | No fix listed |
| qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear | = IPQ4019, MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 820A, SD 835, SD | No fix listed |
References
- 103671 third-party-advisory vdb-entry
- source.android.com vendor-advisory