CVE-2016-10382

In all Qualcomm products with Android releases from CAF using the Linux kernel, access control to the I2C bus is not sufficient

published August 18, 2017

CVSS
—
EPSS
1%
Percentile
57.9
In the wild
Unconfirmed
What it is

⚠️ In Qualcomm devices running Android, a misstep in access control to the I2C bus could let unauthorized users meddle with sensitive components! Think of the I2C bus as a busy delivery dock for electronics, where without proper checks, anyone could waltz in and change orders or even take items—no questions asked! This vulnerability means that unauthorized entities could interact with devices at a low level, potentially altering the functioning of hardware components or gaining access to sensitive data. While the full extent of the impact isn't defined, the implications are definitely concerning for device integrity!

Put simply

Think of the I2C bus as a busy delivery dock for electronics, where without proper checks, anyone could waltz in and change orders or even take items—no questions asked! The vulnerability arises due to insufficient access control on the I2C bus in Qualcomm products using Android. This flaw could allow unauthorized users to interact with the bus and its connected devices without proper authentication.

What to do

This vulnerability means that unauthorized entities could interact with devices at a low level, potentially altering the functioning of hardware components or gaining access to sensitive data. While the full extent of the impact isn't defined, the implications are definitely concerning for device integrity! While there’s no known exploit yet, it’s wise to ensure your Qualcomm devices are updated to the latest firmware. Monitor for any patches or updates from Qualcomm that address access controls and apply them promptly. You've got this! Staying informed and proactive will keep your devices secure. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00862 · 57.9th percentile
Published
2017-08-18T18:00Z
EPSS history
Timeline
  • 18 AUG 18:00Z
    In all Qualcomm products with Android releases from CAF using the Linux kernel, access control to the I2C bus is not sufficient
    cvelistv5