ZeroHour

CVE-2016-10414

CVSS 3.0
9.8 critical
EPSS
1%p68
Published
()
Modified
Description

In Android before 2018-04-05 or earlier security patch level on Qualcomm Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear FSM9055, IPQ4019, MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, and SDX20, when a hash is passed with zero datalength, the code returns an error, even though zero data length is valid.

Vendors
qualcomm
Products
mdm9206 firmware, mdm9607 firmware, mdm9625 firmware, mdm9635m firmware, mdm9640 firmware, mdm9645 firmware, mdm9650 firmware, mdm9655 firmware, msm8909w firmware, sd 210 firmware, sd 212 firmware, sd 205 firmware
Weakness
CWE-388
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.