CVE-2016-10411 Denial of service in Snapdragon Mobile

High 7.5 Published 18 Apr 2018 Updated 17 Sep 2024

A malformed RTCP packet causes the RTP daemon to crash, terminating Voice over LTE calls on affected Qualcomm Snapdragon devices.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2016-10411?

CVE-2016-10411 is a high-severity denial of service vulnerability in Qualcomm Sd 205 Firmware, published on 18 Apr 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, and SD 835, RTP daemon crashes and terminates VT call when UE receives RTCP unknown APP packet report which caused the parser to miss an end of RTCP packet length and go on forever looking for it, even going beyond the limits of the RTCP Packet length.

Weakness: CWE-399

Which versions are affected by CVE-2016-10411?

It affects 20 products.

Products include Qualcomm Sd 205 Firmware, Qualcomm Sd 210 Firmware, Qualcomm Sd 212 Firmware, Qualcomm Sd 400 Firmware, Qualcomm Sd 410 Firmware, Qualcomm Sd 412 Firmware and 14 more.

How do I fix CVE-2016-10411?

No fix has been published for CVE-2016-10411 yet. Limit exposure of the affected software until one is available.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2016-10411 being exploited?

There is no known exploitation of CVE-2016-10411 in the wild and no public exploit code.

All Qualcomm Sd 205 Firmware vulnerabilities

Sources

Also known as GHSA-qh5m-f9qx-pv32.