CVE-2016-10477

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 210/SD 212/SD 205, SD 400, SD 430, SD 615/16/SD 415, SD 617, SD…

published April 18, 2018

CVSS
—
EPSS
1%
Percentile
69.7
In the wild
Unconfirmed
What it is

🔍 A sneaky buffer overflow is lurking in Android on Qualcomm Snapdragon chips, potentially triggered during smart card requests! Think of it as a busy restaurant where a waiter accidentally keeps serving the same dish to the same table, causing the orders to overflow and create chaos in the kitchen! 🍽️ If exploited, this vulnerability could lead to unpredictable behavior in the affected devices, potentially crashing applications or causing data corruption—definitely not what anyone wants! 📉

Put simply

Think of it as a busy restaurant where a waiter accidentally keeps serving the same dish to the same table, causing the orders to overflow and create chaos in the kitchen! 🍽️ This buffer overflow vulnerability occurs when processing smart card requests, allowing excess data to overwrite adjacent memory, which can lead to unexpected system behavior.

What to do

If exploited, this vulnerability could lead to unpredictable behavior in the affected devices, potentially crashing applications or causing data corruption—definitely not what anyone wants! 📉 To safeguard your devices, ensure your Android version is updated to at least the April 2018 security patch. Regular patch management is essential to mitigate this risk! 🔧 You’ve got this! Stay proactive, and keep your devices secure! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01281 · 69.7th percentile
Published
2018-04-18T14:00Z
EPSS history
Timeline
  • 18 APR 14:00Z
    In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 210/SD 212/SD 205, SD 400, SD 430, SD 615/16/SD 415, SD 617, SD…
    cvelistv5