Non notée
CVE-2016-10439 In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile…
Description
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, and SD 820A, there is a TOCTOU vulnerability in the input validation for bulletin_board_read syscall. A pointer dereference is being validated without promising the pointer hasn't been changed by the HLOS program.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Snapdragon Automobile, Snapdragon Mobile | Versions non publiées |
Références
- source.android.com source.android.com
- 103671 www.securityfocus.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Snapdragon Automobile, Snapdragon Mobile
Les 39 CVE de Snapdragon Automobile, Snapdragon Mobile →
CVE-2018-5868
Lack of checking input size can lead to buffer overflow In WideVine in snapdragon automobile and snapdragon mobile in…
Non notée
CVE-2017-18320
QSEE unload attempt on a 3rd party TEE without previously loading results in a data abort in snapdragon automobile and…
Non notée
CVE-2017-18318
Missing validation check on CRL issuer name in Snapdragon Automobile, Snapdragon Mobile in versions MSM8996AU, SD…
Non notée
CVE-2017-18317
Restrictions related to the modem (sim lock, sim kill) can be bypassed by manipulating the system to issue a…
Non notée