CVE-2016-10433

EPSS 0.76%
Veröffentlicht 18.04.2018 14:29:11
Zuletzt bearbeitet 21.11.2024 02:43:59
Erkennungen
Login

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9635M, MDM9640, MDM9645, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 820, and SD 820A, TOCTOU vulnerability during SSD image decryption may cause memory corruption.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 2 Referenzen 5

NVD 24 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Qualcomm ≫ Mdm9635m Firmware Version -

Qualcomm ≫ Mdm9635m Version -

Qualcomm ≫ Mdm9640 Firmware Version -

Qualcomm ≫ Mdm9640 Version -

Qualcomm ≫ Mdm9645 Firmware Version -

Qualcomm ≫ Mdm9645 Version -

Qualcomm ≫ Msm8909w Firmware Version -

Qualcomm ≫ Msm8909w Version -

Qualcomm ≫ Sd 210 Firmware Version -

Qualcomm ≫ Sd 210 Version -

Qualcomm ≫ Sd 212 Firmware Version -

Qualcomm ≫ Sd 212 Version -

Qualcomm ≫ Sd 205 Firmware Version -

Qualcomm ≫ Sd 205 Version -

Qualcomm ≫ Sd 400 Firmware Version -

Qualcomm ≫ Sd 400 Version -

Qualcomm ≫ Sd 410 Firmware Version -

Qualcomm ≫ Sd 410 Version -

Qualcomm ≫ Sd 412 Firmware Version -

Qualcomm ≫ Sd 412 Version -

Qualcomm ≫ Sd 425 Firmware Version -

Qualcomm ≫ Sd 425 Version -

Qualcomm ≫ Sd 430 Firmware Version -

Qualcomm ≫ Sd 430 Version -

Qualcomm ≫ Sd 450 Firmware Version -

Qualcomm ≫ Sd 450 Version -

Qualcomm ≫ Sd 615 Firmware Version -

Qualcomm ≫ Sd 615 Version -

Qualcomm ≫ Sd 616 Firmware Version -

Qualcomm ≫ Sd 616 Version -

Qualcomm ≫ Sd 415 Firmware Version -

Qualcomm ≫ Sd 415 Version -

Qualcomm ≫ Sd 617 Firmware Version -

Qualcomm ≫ Sd 617 Version -

Qualcomm ≫ Sd 625 Firmware Version -

Qualcomm ≫ Sd 625 Version -

Qualcomm ≫ Sd 650 Firmware Version -

Qualcomm ≫ Sd 650 Version -

Qualcomm ≫ Sd 652 Firmware Version -

Qualcomm ≫ Sd 652 Version -

Qualcomm ≫ Sd 800 Firmware Version -

Qualcomm ≫ Sd 800 Version -

Qualcomm ≫ Sd 808 Firmware Version -

Qualcomm ≫ Sd 808 Version -

Qualcomm ≫ Sd 820a Firmware Version -

Qualcomm ≫ Sd 820a Version -

Qualcomm ≫ Sd 820 Firmware Version -

Qualcomm ≫ Sd 820 Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.76%	0.503

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	8.1	2.2	5.9	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

https://source.android.com/security/bulletin/2018-04-01

Vendor Advisory

http://www.securityfocus.com/bid/103671

Third Party Advisory

VDB Entry

https://nvd.nist.gov/vuln/detail/CVE-2016-10433

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-10433

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-10433

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2016-10433