CVE-2016-10479

N/A

Description

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9607, MDM9615, MDM9635M, MDM9640, SD 210/SD 212/SD 205, SD 400, SD 600, SD 615/16/SD 415, SD 617, SD 650/52, SD 800, SD 810, and SD 820, an arbitrary length value from an incoming message to QMI Proxy can lead to an out-of-bounds write in the stack variable message.

CVE Details

CVSS v3.1 ScoreN/A

Published4/18/2018

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

qualcomm:mdm9607qualcomm:mdm9607_firmwarequalcomm:mdm9615qualcomm:mdm9615_firmwarequalcomm:mdm9635mqualcomm:mdm9635m_firmwarequalcomm:mdm9640qualcomm:mdm9640_firmwarequalcomm:sd_205qualcomm:sd_205_firmwarequalcomm:sd_210qualcomm:sd_210_firmwarequalcomm:sd_212qualcomm:sd_212_firmwarequalcomm:sd_400qualcomm:sd_400_firmwarequalcomm:sd_415qualcomm:sd_415_firmwarequalcomm:sd_600qualcomm:sd_600_firmwarequalcomm:sd_615qualcomm:sd_615_firmwarequalcomm:sd_616qualcomm:sd_616_firmwarequalcomm:sd_617qualcomm:sd_617_firmwarequalcomm:sd_650qualcomm:sd_650_firmwarequalcomm:sd_652qualcomm:sd_652_firmwarequalcomm:sd_800qualcomm:sd_800_firmwarequalcomm:sd_810qualcomm:sd_810_firmwarequalcomm:sd_820qualcomm:sd_820_firmware

Weaknesses (CWE)

CWE-787

References

http://www.securityfocus.com/bid/103671(product-security@qualcomm.com)

https://source.android.com/security/bulletin/2018-04-01(product-security@qualcomm.com)

http://www.securityfocus.com/bid/103671(af854a3a-2127-422b-91ae-364da2661108)

https://source.android.com/security/bulletin/2018-04-01(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.