We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2016-10476



Assignerqualcomm
Reserved2017-08-16
Published2018-04-18
Updated2024-09-16

Description

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835, and SDX20, missing array index checks on app index in function qcril_uim_clear_encrypted_pin results in accessing addresses outside the bounds of the buffer when app index is too large.

Product status

MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835, SDX20
affected

References

https://source.android.com/security/bulletin/2018-04-01

http://www.securityfocus.com/bid/103671 (103671) vdb-entry

cve.org CVE-2016-10476

nvd.nist.gov CVE-2016-10476

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2016-10476
Support options

Helpdesk Telegram

Subscribe to our newsletter to learn more about our work.