10

CVE-2016-10442

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9640, SDM630, MSM8976, MSM8937, SDM845, MSM8976, and MSM8952, when running module or kernel code with improper access control allowing writing to arbitrary regions of memory, the user may utilize this vector to alter module executable code.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ Mdm9640 Firmware Version -
   Qualcomm ≫ Mdm9640 Version -
Qualcomm ≫ Sdm630 Firmware Version -
   Qualcomm ≫ Sdm630 Version -
Qualcomm ≫ Mdm9650 Firmware Version -
   Qualcomm ≫ Mdm9650 Version -
Qualcomm ≫ Msm8976 Firmware Version -
   Qualcomm ≫ Msm8976 Version -
Qualcomm ≫ Msm8937 Firmware Version -
   Qualcomm ≫ Msm8937 Version -
Qualcomm ≫ Sdm845 Firmware Version -
   Qualcomm ≫ Sdm845 Version -
Qualcomm ≫ Msm8976 Firmware Version -
   Qualcomm ≫ Msm8976 Version -
Qualcomm ≫ Msm8952 Firmware Version -
   Qualcomm ≫ Msm8952 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.19% 0.638
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.8 3.9 5.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

https://source.android.com/security/bulletin/2018-04-01
Vendor Advisory
http://www.securityfocus.com/bid/103671
Third Party Advisory
VDB Entry