CVE-2016-10478 Integer overflow in Snapdragon Mobile
An integer overflow in Qualcomm Snapdragon Mobile's QCRIL SCWS processing leads to a buffer overflow, potentially allowing code execution on Android devices.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2016-10478?
CVE-2016-10478 is a critical vulnerability in Qualcomm Sd 617 Firmware, published on 18 Apr 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 617, incorrect size calculation in QCRIL SCWS processing have Integer overflow which will lead to a buffer overflow.
Weakness: CWE-190
Which versions are affected by CVE-2016-10478?
It affects 1 product.
Products include Qualcomm Sd 617 Firmware.
How do I fix CVE-2016-10478?
No fix has been published for CVE-2016-10478 yet. Limit exposure of the affected software until one is available.
Is CVE-2016-10478 being exploited?
There is no known exploitation of CVE-2016-10478 in the wild and no public exploit code.
Sources
Also known as GHSA-www3-83wr-pxc8.