CVE-2016-10498

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9635M, MDM9645, MDM9650, MDM9655, SD 210/SD 212/SD 205, SD 400…

published April 18, 2018

CVSS
—
EPSS
1%
Percentile
68.5
In the wild
Unconfirmed
What it is

⚠️ A timing change in the RACH procedure can cause Qualcomm's micro kernel to become stuck. This vulnerability creeps in unnoticed, like a delivery driver taking a nap in the truck instead of making their rounds! ⚡ Imagine a busy restaurant where the chef suddenly stops cooking because the order ticket gets tangled up in the system — it’s a recipe for delays! The Qualcomm micro kernel faces a similar hiccup when the DTR signal is cut short, leaving everything in limbo. If exploited, this vulnerability could freeze the micro kernel, potentially causing disruptions in mobile service and impacting the user experience. It’s like when your favorite show buffers at the climax — absolutely frustrating!

Put simply

Imagine a busy restaurant where the chef suddenly stops cooking because the order ticket gets tangled up in the system — it’s a recipe for delays! The Qualcomm micro kernel faces a similar hiccup when the DTR signal is cut short, leaving everything in limbo. This vulnerability arises in Qualcomm Snapdragon chips due to premature stopping of the Data Terminal Ready (DTR) signal during the RACH procedure, leading to the micro kernel getting stuck and unable to resume normal operations.

What to do

If exploited, this vulnerability could freeze the micro kernel, potentially causing disruptions in mobile service and impacting the user experience. It’s like when your favorite show buffers at the climax — absolutely frustrating! To mitigate this issue, ensure your devices are updated to the latest security patch level post-2018-04-05. Regularly check for firmware updates from your device manufacturer to stay ahead of potential disruptions! You've got this! Stay proactive, keep your devices updated, and you'll be a security hero in no time! 🦸

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01228 · 68.5th percentile
Published
2018-04-18T14:00Z
EPSS history
Timeline
  • 18 APR 14:00Z
    In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9635M, MDM9645, MDM9650, MDM9655, SD 210/SD 212/SD 205, SD 400…
    cvelistv5