ZeroHour

CVE-2016-10437

CVSS 3.0
7.5 high
EPSS
<1%p56
Published
()
Modified
Description

In Android before 2018-04-05 or earlier security patch level on Qualcomm Small Cell SoC, Snapdragon Mobile, and Snapdragon Wear FSM9055, MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 835, and SDX20, while logging debug statements or ftrace events from rmnet_data, the socket buffer function uses normal format specifiers which may result in information exposure.

Vendors
qualcomm
Products
mdm9206 firmware, mdm9607 firmware, fsm9055 firmware, mdm9635m firmware, mdm9640 firmware, mdm9650 firmware, msm8909w firmware, sd 210 firmware, sd 212 firmware, sd 205 firmware, sd 400 firmware, sd 410 firmware
Weakness
CWE-200
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

In the news

No ingested article mentions this CVE yet.