CVE-2016-10428

CVE-2016-10428: vulnerability in Qualcomm, Inc. Snapdragon Automobile…

Published · Updated

Follow this CVE+ Monitor Snapdragon Automobile, Snapdragon Mobile

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.8%
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, and SD 820A, HMAC verification in counter file uses an insecure memcmp which may assist a timing attack.
Affected products
Qualcomm, Inc. · Snapdragon Automobile, Snapdragon Mobile
Related CVEs — Qualcomm, Inc. Snapdragon Automobile…

In the same product, most dangerous first.

CVE-2015-9148—CVE-2015-9148EPSS 1.3%CVE-2016-10426—CVE-2016-10426EPSS 1.3%CVE-2015-9111—CVE-2015-9111EPSS 1.3%CVE-2017-18318—CVE-2017-18318EPSS 1.3%CVE-2015-9112—CVE-2015-9112EPSS 1.3%CVE-2017-18129—CVE-2017-18129EPSS 1.3%