Lucene search

QualcommCVE-2016-10478

HistoryApr 18, 2018 - 2:29 p.m.

CVE-2016-10478

2018-04-1814:29:13

CWE-190

qualcomm

web.nvd.nist.gov

android

qualcomm

sd 617

integer overflow

buffer overflow

security patch

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.7

Confidence

High

EPSS

0.002

Percentile

56.1%

JSON

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 617, incorrect size calculation in QCRIL SCWS processing have Integer overflow which will lead to a buffer overflow.

Affected configurations

Nvd

Node

qualcommsd_617_firmwareMatch-

AND

qualcommsd_617Match-

VendorProductVersionCPE
qualcommsd_617_firmware-cpe:2.3:o:qualcomm:sd_617_firmware:-:*:*:*:*:*:*:*
qualcommsd_617-cpe:2.3:h:qualcomm:sd_617:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
qualcomm	sd_617_firmware	-	cpe:2.3:o:qualcomm:sd_617_firmware:-:::::::*
qualcomm	sd_617	-	cpe:2.3:h:qualcomm:sd_617:-:::::::*

CNA Affected

[
  {
    "product": "Snapdragon Mobile",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "SD 617"
      }
    ]
  }
]

References

www.securityfocus.com/bid/103671

source.android.com/security/bulletin/2018-04-01

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.7

Confidence

High

EPSS

0.002

Percentile

56.1%

JSON

Related for CVE-2016-10478