10
CVE-2016-10442
- EPSS 0.18%
- Published 18.04.2018 14:29:11
- Last modified 21.11.2024 02:44:01
- Source product-security@qualcomm.com
- Teams watchlist Login
- Open Login
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9640, SDM630, MSM8976, MSM8937, SDM845, MSM8976, and MSM8952, when running module or kernel code with improper access control allowing writing to arbitrary regions of memory, the user may utilize this vector to alter module executable code.
Data is provided by the National Vulnerability Database (NVD)
Qualcomm ≫ Mdm9640 Firmware Version-
Qualcomm ≫ Sdm630 Firmware Version-
Qualcomm ≫ Mdm9650 Firmware Version-
Qualcomm ≫ Msm8976 Firmware Version-
Qualcomm ≫ Msm8937 Firmware Version-
Qualcomm ≫ Sdm845 Firmware Version-
Qualcomm ≫ Msm8976 Firmware Version-
Qualcomm ≫ Msm8952 Firmware Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.18% | 0.358 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 9.8 | 3.9 | 5.9 |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 10 | 10 | 10 |
AV:N/AC:L/Au:N/C:C/I:C/A:C
|
CWE-284 Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.