CVE-2016-10458
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 835, SD 845, SDM630, SDM636, SDM660, SDX20, and Snapdragon_High_Med_2016, the 'proper' solution for this will be to ensure that any users of qsee_log in the bootchain (before Linux boots) unallocate their buffers and clear the qsee_log pointer. Until support for that is implemented in TZ and the bootloader, enable tz_log to avoid potential scribbling. This solution will prevent the linux kernel memory corruption.
Published:Apr 18, 2018
Last Modified:Nov 21, 2024
EPS:Apr 18, 2018
EPSS Score:0.00217
CVSS Score:9.8
Affected Products
Vendor
Product
Action
Vendor
Qualcomm
Product
Sd 205
Qualcomm
Sd 205
Vendor
Qualcomm
Product
Sd 205 Firmware
Qualcomm
Sd 205 Firmware
Vendor
Qualcomm
Product
Sd 210
Qualcomm
Sd 210
Vendor
Qualcomm
Product
Sd 210 Firmware
Qualcomm
Sd 210 Firmware
Vendor
Qualcomm
Product
Sd 212
Qualcomm
Sd 212
Vendor
Qualcomm
Product
Sd 212 Firmware
Qualcomm
Sd 212 Firmware
Vendor
Qualcomm
Product
Sd 410
Qualcomm
Sd 410
Vendor
Qualcomm
Product
Sd 410 Firmware
Qualcomm
Sd 410 Firmware
Vendor
Qualcomm
Product
Sd 412
Qualcomm
Sd 412
Vendor
Qualcomm
Product
Sd 412 Firmware
Qualcomm
Sd 412 Firmware
Vendor
Qualcomm
Product
Sd 415
Qualcomm
Sd 415
Vendor
Qualcomm
Product
Sd 415 Firmware
Qualcomm
Sd 415 Firmware
Vendor
Qualcomm
Product
Sd 425
Qualcomm
Sd 425
Vendor
Qualcomm
Product
Sd 425 Firmware
Qualcomm
Sd 425 Firmware
Vendor
Qualcomm
Product
Sd 427
Qualcomm
Sd 427
Vendor
Qualcomm
Product
Sd 427 Firmware
Qualcomm
Sd 427 Firmware
Vendor
Qualcomm
Product
Sd 430
Qualcomm
Sd 430
Vendor
Qualcomm
Product
Sd 430 Firmware
Qualcomm
Sd 430 Firmware
Vendor
Qualcomm
Product
Sd 450
Qualcomm
Sd 450
Vendor
Qualcomm
Product
Sd 450 Firmware
Qualcomm
Sd 450 Firmware
Vendor
Qualcomm
Product
Sd 615
Qualcomm
Sd 615
Vendor
Qualcomm
Product
Sd 615 Firmware
Qualcomm
Sd 615 Firmware
Vendor
Qualcomm
Product
Sd 616
Qualcomm
Sd 616
Vendor
Qualcomm
Product
Sd 616 Firmware
Qualcomm
Sd 616 Firmware
Vendor
Qualcomm
Product
Sd 617
Qualcomm
Sd 617
Vendor
Qualcomm
Product
Sd 617 Firmware
Qualcomm
Sd 617 Firmware
Vendor
Qualcomm
Product
Sd 625
Qualcomm
Sd 625
Vendor
Qualcomm
Product
Sd 625 Firmware
Qualcomm
Sd 625 Firmware
Vendor
Qualcomm
Product
Sd 650
Qualcomm
Sd 650
Vendor
Qualcomm
Product
Sd 650 Firmware
Qualcomm
Sd 650 Firmware
Vendor
Qualcomm
Product
Sd 652
Qualcomm
Sd 652
Vendor
Qualcomm
Product
Sd 652 Firmware
Qualcomm
Sd 652 Firmware
Vendor
Qualcomm
Product
Sd 808
Qualcomm
Sd 808
Vendor
Qualcomm
Product
Sd 808 Firmware
Qualcomm
Sd 808 Firmware
Vendor
Qualcomm
Product
Sd 810
Qualcomm
Sd 810
Vendor
Qualcomm
Product
Sd 810 Firmware
Qualcomm
Sd 810 Firmware
Vendor
Qualcomm
Product
Sd 820
Qualcomm
Sd 820
Vendor
Qualcomm
Product
Sd 820 Firmware
Qualcomm
Sd 820 Firmware
Vendor
Qualcomm
Product
Sd 835
Qualcomm
Sd 835
Vendor
Qualcomm
Product
Sd 835 Firmware
Qualcomm
Sd 835 Firmware
Vendor
Qualcomm
Product
Sd 845
Qualcomm
Sd 845
Vendor
Qualcomm
Product
Sd 845 Firmware
Qualcomm
Sd 845 Firmware
Vendor
Qualcomm
Product
Sdm630
Qualcomm
Sdm630
Vendor
Qualcomm
Product
Sdm630 Firmware
Qualcomm
Sdm630 Firmware
Vendor
Qualcomm
Product
Sdm636
Qualcomm
Sdm636
Vendor
Qualcomm
Product
Sdm636 Firmware
Qualcomm
Sdm636 Firmware
Vendor
Qualcomm
Product
Sdm660
Qualcomm
Sdm660
Vendor
Qualcomm
Product
Sdm660 Firmware
Qualcomm
Sdm660 Firmware
Vendor
Qualcomm
Product
Sdx20
Qualcomm
Sdx20
Vendor
Qualcomm
Product
Sdx20 Firmware
Qualcomm
Sdx20 Firmware
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Related CVEs
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
