CVE-2016-10457

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD…

published April 18, 2018

CVSS
—
EPSS
1%
Percentile
67.4
In the wild
Unconfirmed
What it is

⚠️ An Android app might be asking for more permissions than it really needs, like a restaurant that insists on knowing your entire life story just to take your order! It's as if you visited a cafe and they asked for your favorite childhood memory and your high school GPA just to serve you a cup of coffee. This vulnerability exposes the potential for unauthorized access to user data, making it unnecessarily risky! This could allow malicious apps to pry into your private information, accessing data you never intended to share. While there's no known exploit yet, being over-permissive can lead to data leaks or unwanted data collection, making this a serious concern for user privacy.

Put simply

It's as if you visited a cafe and they asked for your favorite childhood memory and your high school GPA just to serve you a cup of coffee. This vulnerability exposes the potential for unauthorized access to user data, making it unnecessarily risky! In certain Qualcomm Snapdragon Mobile devices, apps can request excessive permissions beyond what's necessary. This misconfiguration can elevate the risk of data exposure and unauthorized access to sensitive information.

What to do

This could allow malicious apps to pry into your private information, accessing data you never intended to share. While there's no known exploit yet, being over-permissive can lead to data leaks or unwanted data collection, making this a serious concern for user privacy. Developers should audit their app permissions, ensuring they only request what’s essential for functionality. Users should check for updates to their devices and install the latest security patch released after April 5, 2018, to mitigate this risk. You've got this! Stay vigilant and keep those permissions under control! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01185 · 67.4th percentile
Published
2018-04-18T14:00Z
EPSS history
Timeline
  • 18 APR 14:00Z
    In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD…
    cvelistv5