CVE-2016-10437
—CVSS 3.0
7.5 high
EPSS
<1%p56
Published
()
Modified
Description
In Android before 2018-04-05 or earlier security patch level on Qualcomm Small Cell SoC, Snapdragon Mobile, and Snapdragon Wear FSM9055, MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 835, and SDX20, while logging debug statements or ftrace events from rmnet_data, the socket buffer function uses normal format specifiers which may result in information exposure.
- Vendors
- qualcomm
- Products
- mdm9206 firmware, mdm9607 firmware, fsm9055 firmware, mdm9635m firmware, mdm9640 firmware, mdm9650 firmware, msm8909w firmware, sd 210 firmware, sd 212 firmware, sd 205 firmware, sd 400 firmware, sd 410 firmware
- Weakness
- CWE-200
- Vector
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
In the news0 stories
No ingested article mentions this CVE yet.