Critical severity · published Apr 18, 2018
CVE-2016-10440
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 425, SD 430, SD 450, SD 625, and SD 650/52, there is improper access control to a bus
9.8
CVSS
1.1%
EPSS
No
On KEV
Description
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 425, SD 430, SD 450, SD 625, and SD 650/52, there is improper access control to a bus.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 66% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
S4
SD 425 Firmware · Qualcomm
All versions, or not specified · source: NVD
S4
SD 430 Firmware · Qualcomm
All versions, or not specified · source: NVD
S4
SD 450 Firmware · Qualcomm
All versions, or not specified · source: NVD
S6
SD 625 Firmware · Qualcomm
All versions, or not specified · source: NVD
S6
SD 650 Firmware · Qualcomm
All versions, or not specified · source: NVD
S6
SD 652 Firmware · Qualcomm
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-10440
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-10440
Third Party Advisory
http://www.securityfocus.com/bid/103671
Vendor Advisory
https://source.android.com/security/bulletin/2018-04-01
More from SD 425 Firmware
9.8
CVE-2017-11076
On some hardware revisions where VP9 decoding is hardware-accelerated, the frame size is not programmed correctly into the decoder hardware which can lead to an invalid memory…
9.8
CVE-2019-2332
Memory corruption while accessing the memory as payload size is not validated before access in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial…
9.8
CVE-2019-2331
Possible Integer overflow because of subtracting two integers without checking if the result would overflow or not in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT,…
9.8
CVE-2019-2325
Out of boundary access due to token received from ADSP and is used without validation as an index into the array in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT,…
9.8
CVE-2019-2324
When ADSP is compromised, the audio port index that`s returned from ADSP might be out of the valid range and leads to out of boundary access in Snapdragon Auto, Snapdragon…