CVE-2016-10494

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607…

published April 18, 2018

CVSS
—
EPSS
1%
Percentile
71.0
In the wild
Unconfirmed
What it is

⚠️ A sneaky integer overflow in Qualcomm's IPC router could lead to buffer overflows, affecting numerous Snapdragon devices! 📱 Think of this as a narrow delivery route that suddenly allows oversized packages to slip through. Without proper checks, these oversized parcels can cause traffic jams, affecting everything down the line! If exploited, an attacker might be able to manipulate the system, potentially crashing critical services or even gaining unwanted access. The consequences could be frustratingly disruptive for users—like getting stuck in a traffic jam on a road that should have been clear.

Put simply

Think of this as a narrow delivery route that suddenly allows oversized packages to slip through. Without proper checks, these oversized parcels can cause traffic jams, affecting everything down the line! This vulnerability arises from an integer overflow in the IPC router Root-PD driver, which can lead to unchecked buffer overflows, compromising system integrity on affected Qualcomm Snapdragon devices.

What to do

If exploited, an attacker might be able to manipulate the system, potentially crashing critical services or even gaining unwanted access. The consequences could be frustratingly disruptive for users—like getting stuck in a traffic jam on a road that should have been clear. To mitigate this issue, ensure your devices are updated to the latest security patch level from April 5, 2018, or later. Regularly check for firmware updates from your device manufacturer and apply them promptly! You've got this! Stay vigilant and keep your devices updated to maintain security hero status! 🦸

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01344 · 71.0th percentile
Published
2018-04-18T14:00Z
EPSS history
Timeline
  • 18 APR 14:00Z
    In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607…
    cvelistv5