CVE-2016-10458

CVE-2016-10458: falha em Qualcomm, Inc. Snapdragon Mobile

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Snapdragon Mobile

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 1.3%
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 835, SD 845, SDM630, SDM636, SDM660, SDX20, and Snapdragon_High_Med_2016, the 'proper' solution for this will be to ensure that any users of qsee_log in the bootchain (before Linux boots) unallocate their buffers and clear the qsee_log pointer. Until support for that is implemented in TZ and the bootloader, enable tz_log to avoid potential scribbling. This solution will prevent the linux kernel memory corruption.
Produtos afetados
Qualcomm, Inc. · Snapdragon Mobile
CVEs relacionadas — Qualcomm, Inc. Snapdragon Mobile

No mesmo produto, das mais perigosas para as menos.

CVE-2017-14915—CVE-2017-14915EPSS 1.6%CVE-2015-9219—CVE-2015-9219EPSS 1.4%CVE-2015-9150—CVE-2015-9150EPSS 1.4%CVE-2016-10496—CVE-2016-10496EPSS 1.4%CVE-2015-9215—CVE-2015-9215EPSS 1.4%CVE-2015-9179—CVE-2015-9179EPSS 1.4%