CVE-2016-10444

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, SD 210/SD…

published April 18, 2018

CVSS
—
EPSS
1%
Percentile
66.0
In the wild
Unconfirmed
What it is

⚠️ A hidden door leads to a storage room no one should enter! This vulnerability affects multiple Qualcomm Snapdragon platforms, where a misconfigured Access Control Policy could allow unauthorized access to system resources. 🔒 Think of this vulnerability like a hotel where the front desk mistakenly gives guests access to the maintenance room — they might find valuable equipment or sensitive information that should remain off-limits! If exploited, this flaw could let unauthorized processes interact with critical resources, potentially leading to increased risks of data exposure or system instability. While it's not known to be actively exploited, leaving such a door ajar isn't a wise choice!

Put simply

Think of this vulnerability like a hotel where the front desk mistakenly gives guests access to the maintenance room — they might find valuable equipment or sensitive information that should remain off-limits! This vulnerability arises from an oversight in the SMMU Access Control Policy on affected Snapdragon hardware, which fails to properly block HLOS from accessing BLSP and BAM resources as intended. This could potentially enable unintended interactions with system components.

What to do

If exploited, this flaw could let unauthorized processes interact with critical resources, potentially leading to increased risks of data exposure or system instability. While it's not known to be actively exploited, leaving such a door ajar isn't a wise choice! To address this issue, update your devices to include the latest security patches released after April 5, 2018. Ensure that the implemented Access Control Policies are correctly configured to restrict access to sensitive resources. 🔄 You’ve got this! Regular updates and vigilance will keep your systems secure and your security hero status intact! 🦸‍♂️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01123 · 66.0th percentile
Published
2018-04-18T14:00Z
EPSS history
Timeline
  • 18 APR 14:00Z
    In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, SD 210/SD…
    cvelistv5