CVEvulnerability
CVE-2016-10481
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2018-04-18
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-17
Description
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, QCA4531, QCA6174A, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9378, QCA9379, SD 210/SD 212/SD 205, SD 425, SD 600, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 835, SD 845, SD 850, and SDX20, if WLAN FW receives the WMI_STA_SMPS_PARAM_CMDID ioctl in not-associated state, when the virtual channel handle is not assigned, the code doesn't check for NULL virtual channel handle, so an assert occurs.
Affected configurations
• qualcomm mdm9607 firmware
• qualcomm mdm9635m firmware
• qualcomm mdm9640 firmware
• qualcomm mdm9650 firmware
• qualcomm sd 210 firmware
• qualcomm sd 212 firmware
• qualcomm sd 205 firmware
• qualcomm sd 425 firmware
• qualcomm sd 600 firmware
• qualcomm sd 625 firmware
• qualcomm sd 650 firmware
• qualcomm sd 652 firmware
• qualcomm sd 808 firmware
• qualcomm sd 810 firmware
• qualcomm sd 820 firmware
• qualcomm sd 835 firmware
• qualcomm sd 845 firmware
• qualcomm sdx20 firmware
• qualcomm qca4531 firmware
• qualcomm qca6174a firmware
• qualcomm qca6574au firmware
• qualcomm qca6584 firmware
• qualcomm qca6584au firmware
• qualcomm qca9377 firmware
• qualcomm qca9378 firmware
• qualcomm qca9379 firmware
Related
Weakness · not in database (1)
References
- http://www.securityfocus.com/bid/103671 Third Party Advisory, VDB Entry
- https://source.android.com/security/bulletin/2018-04-01 Vendor Advisory
- http://www.securityfocus.com/bid/103671 Third Party Advisory, VDB Entry
- https://source.android.com/security/bulletin/2018-04-01 Vendor Advisory