CVE-2016-10462

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 410/12, SD 425, SD 427, SD 430, SD 435…

published April 18, 2018

CVSS
—
EPSS
1%
Percentile
66.0
In the wild
Unconfirmed
What it is

⚠️ The access control policy just dropped the ball! Older Android devices running Qualcomm Snapdragon chips open the door to Slimbus and GPU resources without proper checks. 🔥 Think of it like a restaurant where anyone can wander into the kitchen and access ingredients without a chef’s approval — a recipe for chaos if you're not careful! If someone gains unauthorized access, they could tamper with vital system resources, leading to potential data leaks or compromised device functionality. While the severity is unknown, this oversight can leave devices vulnerable to attacks that exploit these system resources.

Put simply

Think of it like a restaurant where anyone can wander into the kitchen and access ingredients without a chef’s approval — a recipe for chaos if you're not careful! This vulnerability allows improper access to Slimbus and GPU resources due to a lack of robust access control policy in certain Qualcomm Snapdragon chipsets, affecting Android versions prior to the April 2018 security patch.

What to do

If someone gains unauthorized access, they could tamper with vital system resources, leading to potential data leaks or compromised device functionality. While the severity is unknown, this oversight can leave devices vulnerable to attacks that exploit these system resources. Ensure your device is updated to the latest Android version or security patch level that addresses this vulnerability. If you're using affected hardware, consider disabling features that rely on Slimbus and GPU resources until a patch is applied. You've got this! Keep your devices updated and secure, and you'll be a security hero in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01123 · 66.0th percentile
Published
2018-04-18T14:00Z
EPSS history
Timeline
  • 18 APR 14:00Z
    In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 410/12, SD 425, SD 427, SD 430, SD 435…
    cvelistv5