Critical severity · published Apr 18, 2018
CVE-2016-10475
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 210/SD 212/SD 205, SD 400, SD 430, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD…
9.8
CVSS
1.3%
EPSS
No
On KEV
Description
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 210/SD 212/SD 205, SD 400, SD 430, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, and SD 820, lack input validation may lead to a integer overflow that could potentially lead to a buffer overflow.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 71% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
S2
SD 205 Firmware · Qualcomm
All versions, or not specified · source: NVD
S2
SD 210 Firmware · Qualcomm
All versions, or not specified · source: NVD
S2
SD 212 Firmware · Qualcomm
All versions, or not specified · source: NVD
S4
SD 400 Firmware · Qualcomm
All versions, or not specified · source: NVD
S4
SD 415 Firmware · Qualcomm
All versions, or not specified · source: NVD
S4
SD 430 Firmware · Qualcomm
All versions, or not specified · source: NVD
S6
SD 615 Firmware · Qualcomm
All versions, or not specified · source: NVD
S6
SD 616 Firmware · Qualcomm
All versions, or not specified · source: NVD
S6
SD 617 Firmware · Qualcomm
All versions, or not specified · source: NVD
S6
SD 625 Firmware · Qualcomm
All versions, or not specified · source: NVD
S6
SD 650 Firmware · Qualcomm
All versions, or not specified · source: NVD
S6
SD 652 Firmware · Qualcomm
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-10475
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-10475
Third Party Advisory
http://www.securityfocus.com/bid/103671
Vendor Advisory
https://source.android.com/security/bulletin/2018-04-01
More from SD 205 Firmware
9.8
CVE-2017-11076
On some hardware revisions where VP9 decoding is hardware-accelerated, the frame size is not programmed correctly into the decoder hardware which can lead to an invalid memory…
9.8
CVE-2019-2332
Memory corruption while accessing the memory as payload size is not validated before access in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial…
9.8
CVE-2019-2331
Possible Integer overflow because of subtracting two integers without checking if the result would overflow or not in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT,…
9.8
CVE-2019-2325
Out of boundary access due to token received from ADSP and is used without validation as an index into the array in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT,…
9.8
CVE-2019-2324
When ADSP is compromised, the audio port index that`s returned from ADSP might be out of the valid range and leads to out of boundary access in Snapdragon Auto, Snapdragon…