CVE-2016-10479

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9607, MDM9615, MDM9635M, MDM9640, SD 210/SD 212/SD 205, SD 400…

published April 18, 2018

CVSS
—
EPSS
1%
Percentile
67.6
In the wild
Unconfirmed
What it is

⚠️ A message from an unexpected guest could lead to trouble! In devices with Qualcomm Snapdragon mobile chipsets, a sneaky out-of-bounds write could cause chaos if not patched up! 🔥 Think of it like a banquet where the caterer accidentally sends an oversized fruitcake that topples the entire dessert table—one small mistake can lead to a messy situation! If exploited, this vulnerability could allow unauthorized modifications to the device's memory, potentially making the system unstable and exposing sensitive data. Yikes! The consequences could range from unexpected crashes to unauthorized access, putting users at risk.

Put simply

Think of it like a banquet where the caterer accidentally sends an oversized fruitcake that topples the entire dessert table—one small mistake can lead to a messy situation! This vulnerability stems from improper handling of incoming messages to the QMI Proxy, allowing an attacker to send an arbitrarily long value that can cause an out-of-bounds write in the stack, leading to potential memory corruption.

What to do

If exploited, this vulnerability could allow unauthorized modifications to the device's memory, potentially making the system unstable and exposing sensitive data. Yikes! The consequences could range from unexpected crashes to unauthorized access, putting users at risk. To mitigate this issue, ensure that your Android device is updated with the latest security patch (post-2018-04-05) provided by your manufacturer. Regularly check for updates and consider reaching out to Qualcomm for guidance on specific devices. You've got this! Stay proactive with your updates and keep your device secure! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01185 · 67.6th percentile
Published
2018-04-18T14:00Z
EPSS history
Timeline
  • 18 APR 14:00Z
    In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9607, MDM9615, MDM9635M, MDM9640, SD 210/SD 212/SD 205, SD 400…
    cvelistv5