NetSight
high7.5

CVE-2016-10418

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, SD 210…

Impact

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, SD 820A, and SD 835, HLOS can enable PMIC debug through TCSR_QPDI_DISABLE_CFG due to improper access control.

Affected products

VendorProductAffected versions
QualcommMdm9206 Firmware
All versions
QualcommMdm9650 Firmware
All versions
QualcommSd 210 Firmware
All versions
QualcommSd 212 Firmware
All versions
QualcommSd 205 Firmware
All versions
QualcommSd 425 Firmware
All versions
QualcommSd 430 Firmware
All versions
QualcommSd 450 Firmware
All versions
QualcommSd 625 Firmware
All versions
QualcommSd 650 Firmware
All versions
QualcommSd 652 Firmware
All versions
QualcommSd 820a Firmware
All versions

Weakness classification

References