NetSight
high8.1

CVE-2016-10409

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 425, SD 430, SD 450, SD 625, SD 650/52,…

Impact

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, SD 820A, and SD 835, TOCTOU vulnerability may occur while composing the RPMB request using HLOS controlled buffers.

Affected products

VendorProductAffected versions
QualcommSd 425 Firmware
All versions
QualcommSd 430 Firmware
All versions
QualcommSd 450 Firmware
All versions
QualcommSd 625 Firmware
All versions
QualcommSd 650 Firmware
All versions
QualcommSd 652 Firmware
All versions
QualcommSd 820 Firmware
All versions
QualcommSd 835 Firmware
All versions
QualcommSd 820a Firmware
All versions

Weakness classification

References