NetSight
critical9.8

CVE-2016-10445

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 410/12, SD 425, SD 427, SD 430, SD 435,…

Impact

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 820, SD 820A, SD 835, SD 845, SD 850, SDM630, SDM636, SDM660, and Snapdragon_High_Med_2016, input is not properly validated in a QTEE API function.

Affected products

VendorProductAffected versions
QualcommSd 410 Firmware
All versions
QualcommSd 412 Firmware
All versions
QualcommSd 425 Firmware
All versions
QualcommSd 430 Firmware
All versions
QualcommSd 450 Firmware
All versions
QualcommSd 615 Firmware
All versions
QualcommSd 616 Firmware
All versions
QualcommSd 415 Firmware
All versions
QualcommSd 435 Firmware
All versions
QualcommSd 625 Firmware
All versions
QualcommSd 427 Firmware
All versions
QualcommSdm630 Firmware
All versions

Weakness classification

References