CVE-2016-10443 Other in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Packet replay attacks are possible on Qualcomm Snapdragon chipsets in Android devices, requiring security patches to mitigate.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2016-10443?
CVE-2016-10443 is a medium-severity vulnerability in Qualcomm Mdm9206 Firmware, published on 18 Apr 2018. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, and SD 850, packet replay may be possible.
Weakness: CWE-254
Which versions are affected by CVE-2016-10443?
It affects 29 products.
Products include Qualcomm Mdm9206 Firmware, Qualcomm Mdm9607 Firmware, Qualcomm Mdm9635m Firmware, Qualcomm Mdm9640 Firmware, Qualcomm Mdm9645 Firmware, Qualcomm Mdm9650 Firmware and 23 more.
How do I fix CVE-2016-10443?
No fix has been published for CVE-2016-10443 yet. Limit exposure of the affected software until one is available.
Is CVE-2016-10443 being exploited?
There is no known exploitation of CVE-2016-10443 in the wild and no public exploit code.
Other vulnerabilities in Qualcomm Mdm9206 Firmware
- CVE-2016-10394 Improper Authentication in Core
- CVE-2019-10522 Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
- CVE-2019-10528 Use after free in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
- CVE-2019-10533 Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
- CVE-2019-10534 Null dereference in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Sources
Also known as GHSA-2h5q-jp9h-xrj3.