CVE-2016-10389
CVE-2016-10389
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
18 Aug 2017Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
In all Qualcomm products with Android releases from CAF using the Linux kernel, there is no size check for the images being flashed onto the NAND memory in their respective partitions, so there is a possibility of writing beyond the intended partition.
Affected products
Qualcomm, Inc. · All Qualcomm productsWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →