NetSight
critical9.8

CVE-2016-10419

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9640, MDM9645, MDM9650, MDM9655, SD 450, SD 625, SD 650/52, SD 82…

Impact

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9640, MDM9645, MDM9650, MDM9655, SD 450, SD 625, SD 650/52, SD 820, SD 835, SD 845, SD 850, and SDX20, when initializing scheduler object service request, an out of bounds access could occur due to uninitialized object number.

Affected products

VendorProductAffected versions
QualcommMdm9640 Firmware
All versions
QualcommMdm9645 Firmware
All versions
QualcommMdm9650 Firmware
All versions
QualcommMdm9655 Firmware
All versions
QualcommSd 450 Firmware
All versions
QualcommSd 625 Firmware
All versions
QualcommSd 650 Firmware
All versions
QualcommSd 652 Firmware
All versions
QualcommSd 820 Firmware
All versions
QualcommSd 835 Firmware
All versions
QualcommSd 845 Firmware
All versions
QualcommSdx20 Firmware
All versions

Weakness classification

References