CVE-2016-10391

In all Qualcomm products with Android releases from CAF using the Linux kernel, the length in an HCI command is not properly checked for validity.

Score

CVSS 3.0 9.8 Critical

Status

Modified - product-security@qualcomm.com

Published

2017-08-18

Last modified

2024-09-17

Weaknesses

CWE-20

Affected products

• Android (Google)
• All Qualcomm Products (Qualcomm Inc.)

References

• http://www.securityfocus.com/bid/99467
• https://source.android.com/security/bulletin/2017-07-01