10
CVE-2016-10467
- EPSS 1.25%
- Veröffentlicht 18.04.2018 14:29:12
- Zuletzt bearbeitet 21.11.2024 02:44:04
- Erkennungen
LoginIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, SD 617, SD 650/52, SD 800, SD 808, SD 820, and SD 820A, function ce_pkcs1_pss_padding_verify_auto_recover_saltlen assumes that the size of the encoded message is equal to the size of the RSA modulus. This assumption is true for most RSA keys, but it fails when modulus_bitlen % 8 == 1.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ Sd 210 Firmware Version -
Qualcomm ≫ Sd 212 Firmware Version -
Qualcomm ≫ Sd 205 Firmware Version -
Qualcomm ≫ Sd 400 Firmware Version -
Qualcomm ≫ Sd 410 Firmware Version -
Qualcomm ≫ Sd 412 Firmware Version -
Qualcomm ≫ Sd 615 Firmware Version -
Qualcomm ≫ Sd 616 Firmware Version -
Qualcomm ≫ Sd 415 Firmware Version -
Qualcomm ≫ Sd 617 Firmware Version -
Qualcomm ≫ Sd 650 Firmware Version -
Qualcomm ≫ Sd 652 Firmware Version -
Qualcomm ≫ Sd 800 Firmware Version -
Qualcomm ≫ Sd 808 Firmware Version -
Qualcomm ≫ Sd 820a Firmware Version -
Qualcomm ≫ Sd 820 Firmware Version -
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.25% | 0.656 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 9.8 | 3.9 | 5.9 |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| NIST | 10 | 10 | 10 |
AV:N/AC:L/Au:N/C:C/I:C/A:C
|
https://source.android.com/security/bulletin/2018-04-01
http://www.securityfocus.com/bid/103671