CVE-2016-10486
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9640, MDM9645, SD 210/SD 212/SD 205, SD 450, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, and SD 820A, PD failure reason string from user PD is used directly in root PD, so if the buffer parameter is non-NULL terminated in Diag F3 APIs, a buffer overread occurs.
Published:Apr 18, 2018
Last Modified:Nov 21, 2024
EPS:Apr 18, 2018
EPSS Score:0.00217
CVSS Score:9.8
Affected Products
Vendor
Product
Action
Vendor
Qualcomm
Product
Mdm9640
Qualcomm
Mdm9640
Vendor
Qualcomm
Product
Mdm9640 Firmware
Qualcomm
Mdm9640 Firmware
Vendor
Qualcomm
Product
Mdm9645
Qualcomm
Mdm9645
Vendor
Qualcomm
Product
Mdm9645 Firmware
Qualcomm
Mdm9645 Firmware
Vendor
Qualcomm
Product
Sd 205
Qualcomm
Sd 205
Vendor
Qualcomm
Product
Sd 205 Firmware
Qualcomm
Sd 205 Firmware
Vendor
Qualcomm
Product
Sd 210
Qualcomm
Sd 210
Vendor
Qualcomm
Product
Sd 210 Firmware
Qualcomm
Sd 210 Firmware
Vendor
Qualcomm
Product
Sd 212
Qualcomm
Sd 212
Vendor
Qualcomm
Product
Sd 212 Firmware
Qualcomm
Sd 212 Firmware
Vendor
Qualcomm
Product
Sd 450
Qualcomm
Sd 450
Vendor
Qualcomm
Product
Sd 450 Firmware
Qualcomm
Sd 450 Firmware
Vendor
Qualcomm
Product
Sd 617
Qualcomm
Sd 617
Vendor
Qualcomm
Product
Sd 617 Firmware
Qualcomm
Sd 617 Firmware
Vendor
Qualcomm
Product
Sd 625
Qualcomm
Sd 625
Vendor
Qualcomm
Product
Sd 625 Firmware
Qualcomm
Sd 625 Firmware
Vendor
Qualcomm
Product
Sd 650
Qualcomm
Sd 650
Vendor
Qualcomm
Product
Sd 650 Firmware
Qualcomm
Sd 650 Firmware
Vendor
Qualcomm
Product
Sd 652
Qualcomm
Sd 652
Vendor
Qualcomm
Product
Sd 652 Firmware
Qualcomm
Sd 652 Firmware
Vendor
Qualcomm
Product
Sd 808
Qualcomm
Sd 808
Vendor
Qualcomm
Product
Sd 808 Firmware
Qualcomm
Sd 808 Firmware
Vendor
Qualcomm
Product
Sd 810
Qualcomm
Sd 810
Vendor
Qualcomm
Product
Sd 810 Firmware
Qualcomm
Sd 810 Firmware
Vendor
Qualcomm
Product
Sd 820
Qualcomm
Sd 820
Vendor
Qualcomm
Product
Sd 820 Firmware
Qualcomm
Sd 820 Firmware
Vendor
Qualcomm
Product
Sd 820a
Qualcomm
Sd 820a
Vendor
Qualcomm
Product
Sd 820a Firmware
Qualcomm
Sd 820a Firmware
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Related CVEs
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
