NetSight
high7.5

CVE-2016-10406

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9650, SD 210/SD 212/SD 205, SD 410/12, SD 430, SD 450, SD 615/16/…

Impact

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9650, SD 210/SD 212/SD 205, SD 410/12, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, and SD 835, while printing debug message of a pointer in wlan_qmi_err_cb, the real kernel address will be printed regardless of the kptr_restrict system settings.

Affected products

VendorProductAffected versions
QualcommMdm9650 Firmware
All versions
QualcommSd 210 Firmware
All versions
QualcommSd 212 Firmware
All versions
QualcommSd 205 Firmware
All versions
QualcommSd 410 Firmware
All versions
QualcommSd 412 Firmware
All versions
QualcommSd 430 Firmware
All versions
QualcommSd 450 Firmware
All versions
QualcommSd 615 Firmware
All versions
QualcommSd 616 Firmware
All versions
QualcommSd 415 Firmware
All versions
QualcommSd 617 Firmware
All versions

Weakness classification

References