CVEvulnerability

CVE-2016-10442

9.8 CRITICAL Published 2018-04-18 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-04-18
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-284

Description

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9640, SDM630, MSM8976, MSM8937, SDM845, MSM8976, and MSM8952, when running module or kernel code with improper access control allowing writing to arbitrary regions of memory, the user may utilize this vector to alter module executable code.

Affected configurations

• qualcomm mdm9640 firmware • qualcomm sdm630 firmware • qualcomm mdm9650 firmware • qualcomm msm8976 firmware • qualcomm msm8937 firmware • qualcomm sdm845 firmware • qualcomm msm8952 firmware

Related

Weakness · CWE (1)

  • CWE-284 Improper Access Control weakness

References