CVE-2016-10389

In all Qualcomm products with Android releases from CAF using the Linux kernel, there is no size check for the images being flashed onto the NAND memory in their respective partitions, so there is a possibility of writing beyond the intended partition.

Score

CVSS 3.0 7.8 High

Status

Modified - product-security@qualcomm.com

Published

2017-08-18

Last modified

2024-09-17

Weaknesses

CWE-119

Affected products

• Android (Google)
• All Qualcomm Products (Qualcomm Inc.)

References

• http://www.securityfocus.com/bid/99465
• https://source.android.com/security/bulletin/2017-07-01