CVE-2016-10493

CVE-2016-10493: vulnerability in Qualcomm, Inc. Snapdragon Automobile…

Published · Updated

Follow this CVE+ Monitor Snapdragon Mobile+ Monitor Snapdragon Wear

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.1%
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, and SDX20, NPA routines on the rootPD that handle resource requests remoted over QDI may not validate pointers passed from user space which may result in guest OS memory corruption.
Affected products
Qualcomm, Inc. · Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Related CVEs — Qualcomm, Inc. Snapdragon Automobile…

In the same product, most dangerous first.

CVE-2015-9201—CVE-2015-9201EPSS 1.4%CVE-2014-10054—CVE-2014-10054EPSS 1.4%CVE-2015-9145—CVE-2015-9145EPSS 1.4%CVE-2014-9988—CVE-2014-9988EPSS 1.4%CVE-2015-9159—CVE-2015-9159EPSS 1.4%CVE-2015-9184—CVE-2015-9184EPSS 1.4%