CVE-2016-10462 | ByteOS Network

Vulnerability Details :

CVE-2016-10462

Assigner-qualcomm

Assigner Org ID-2cfc7d3e-20d3-47ac-8db7-1b7285aff15f

Published At-18 Apr, 2018 | 14:00

Updated At-16 Sep, 2024 | 16:28

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 820A, SD 835, SDM630, SDM636, SDM660, and Snapdragon_High_Med_2016, the Access Control policy for HLOS allows access to Slimbus, GPU, GIC resources.

EPSS History

Score

Latest Score

-

N/A

Percentile

Latest Percentile

-

N/A

▼Common Vulnerabilities and Exposures (CVE)

Assigner:qualcomm

Assigner Org ID:2cfc7d3e-20d3-47ac-8db7-1b7285aff15f

Published At:18 Apr, 2018 | 14:00

Updated At:16 Sep, 2024 | 16:28

▼CVE Numbering Authority (CNA)

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 820A, SD 835, SDM630, SDM636, SDM660, and Snapdragon_High_Med_2016, the Access Control policy for HLOS allows access to Slimbus, GPU, GIC resources.

Affected Products

Vendor

Qualcomm Technologies, Inc.

Product

Snapdragon Automobile, Snapdragon Mobile

Versions

Affected

SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 820A, SD 835, SDM630, SDM636, SDM660, Snapdragon_High_Med_2016

Problem Types

Type	CWE ID	Description
text	N/A	Configuration in Core.

Type: text

CWE ID: N/A

Description: Configuration in Core.

References

Hyperlink	Resource
https://source.android.com/security/bulletin/2018-04-01	x_refsource_CONFIRM
http://www.securityfocus.com/bid/103671	vdb-entry x_refsource_BID

Hyperlink: https://source.android.com/security/bulletin/2018-04-01

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.securityfocus.com/bid/103671

Resource:

vdb-entry

x_refsource_BID

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://source.android.com/security/bulletin/2018-04-01	x_refsource_CONFIRM x_transferred
http://www.securityfocus.com/bid/103671	vdb-entry x_refsource_BID x_transferred

Hyperlink: https://source.android.com/security/bulletin/2018-04-01

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.securityfocus.com/bid/103671

Resource:

vdb-entry

x_refsource_BID

x_transferred

▼National Vulnerability Database (NVD)

Source:product-security@qualcomm.com

Published At:18 Apr, 2018 | 14:29

Updated At:01 May, 2018 | 16:54

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 820A, SD 835, SDM630, SDM636, SDM660, and Snapdragon_High_Med_2016, the Access Control policy for HLOS allows access to Slimbus, GPU, GIC resources.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	9.8	CRITICAL	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C

Type: Primary

Version: 3.0

Base score: 9.8

Base severity: CRITICAL

Vector:

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 10.0

Base severity: HIGH

Vector:

AV:N/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

Qualcomm Technologies, Inc.

>>sd_410_firmware>>-

cpe:2.3:o:qualcomm:sd_410_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_410:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_412_firmware>>-

cpe:2.3:o:qualcomm:sd_412_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_412:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_425_firmware>>-

cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_430_firmware>>-

cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_450_firmware>>-

cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_615_firmware>>-

cpe:2.3:o:qualcomm:sd_615_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_615:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_616_firmware>>-

cpe:2.3:o:qualcomm:sd_616_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_616:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_415_firmware>>-

cpe:2.3:o:qualcomm:sd_415_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_415:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_435_firmware>>-

cpe:2.3:o:qualcomm:sd_435_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_435:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_625_firmware>>-

cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_427_firmware>>-

cpe:2.3:o:qualcomm:sd_427_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_427:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sdm630_firmware>>-

cpe:2.3:o:qualcomm:sdm630_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sdm630:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_820a_firmware>>-

cpe:2.3:o:qualcomm:sd_820a_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_820a:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_820_firmware>>-

cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_835_firmware>>-

cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_845_firmware>>-

cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_845:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sdm636_firmware>>-

cpe:2.3:o:qualcomm:sdm636_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sdm636:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_850_firmware>>-

cpe:2.3:o:qualcomm:sd_850_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_850:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sdm660_firmware>>-

cpe:2.3:o:qualcomm:sdm660_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sdm660:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_810_firmware>>-

cpe:2.3:o:qualcomm:sd_810_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_810:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_808_firmware>>-

cpe:2.3:o:qualcomm:sd_808_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_808:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_650_firmware>>-

cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_652_firmware>>-

cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-284	Primary	nvd@nist.gov

CWE ID: CWE-284

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://www.securityfocus.com/bid/103671	product-security@qualcomm.com	Third Party Advisory VDB Entry
https://source.android.com/security/bulletin/2018-04-01	product-security@qualcomm.com	Vendor Advisory

Hyperlink: http://www.securityfocus.com/bid/103671

Source: product-security@qualcomm.com

Resource:

Third Party Advisory

VDB Entry

Hyperlink: https://source.android.com/security/bulletin/2018-04-01

Source: product-security@qualcomm.com

Resource:

Vendor Advisory