CRITICAL🇵🇱 Wersja polska

CVE-2016-10467

CVSS 9.8v3.0pub. 2018-04-18upd. 2024-11-21

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, SD 617, SD 650/52, SD 800, SD 808, SD 820, and SD 820A, function ce_pkcs1_pss_padding_verify_auto_recover_saltlen assumes that the size of the encoded message is equal to the size of the RSA modulus. This assumption is true for most RSA keys, but it fails when modulus_bitlen % 8 == 1.

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Qualcomm Sd 205

    HW
    Qualcomm
    all versions

  • Qualcomm Sd 205 Firmware

    OS
    Qualcomm
    all versions

  • Qualcomm Sd 210

    HW
    Qualcomm
    all versions

  • Qualcomm Sd 210 Firmware

    OS
    Qualcomm
    all versions

  • Qualcomm Sd 212

    HW
    Qualcomm
    all versions

  • Qualcomm Sd 212 Firmware

    OS
    Qualcomm
    all versions

  • Qualcomm Sd 400

    HW
    Qualcomm
    all versions

  • Qualcomm Sd 400 Firmware

    OS
    Qualcomm
    all versions

  • Qualcomm Sd 410

    HW
    Qualcomm
    all versions

  • Qualcomm Sd 410 Firmware

    OS
    Qualcomm
    all versions

  • Qualcomm Sd 412

    HW
    Qualcomm
    all versions

  • Qualcomm Sd 412 Firmware

    OS
    Qualcomm
    all versions

  • Qualcomm Sd 415

    HW
    Qualcomm
    all versions

  • Qualcomm Sd 415 Firmware

    OS
    Qualcomm
    all versions

  • Qualcomm Sd 615

    HW
    Qualcomm
    all versions

  • Qualcomm Sd 615 Firmware

    OS
    Qualcomm
    all versions

  • Qualcomm Sd 616

    HW
    Qualcomm
    all versions

  • Qualcomm Sd 616 Firmware

    OS
    Qualcomm
    all versions

  • Qualcomm Sd 617

    HW
    Qualcomm
    all versions

  • Qualcomm Sd 617 Firmware

    OS
    Qualcomm
    all versions

  • Qualcomm Sd 650

    HW
    Qualcomm
    all versions

  • Qualcomm Sd 650 Firmware

    OS
    Qualcomm
    all versions

  • Qualcomm Sd 652

    HW
    Qualcomm
    all versions

  • Qualcomm Sd 652 Firmware

    OS
    Qualcomm
    all versions

  • Qualcomm Sd 800

    HW
    Qualcomm
    all versions

  • Qualcomm Sd 800 Firmware

    OS
    Qualcomm
    all versions

  • Qualcomm Sd 808

    HW
    Qualcomm
    all versions

  • Qualcomm Sd 808 Firmware

    OS
    Qualcomm
    all versions

  • Qualcomm Sd 820

    HW
    Qualcomm
    all versions

  • Qualcomm Sd 820a

    HW
    Qualcomm
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2017-11076CRITICAL9.8PL ✓same product

Qualcomm: Nieprawidłowy dostęp do pamięci przy dekodowaniu VP9 (sprzętowe)

CVE-2017-17772CRITICAL9.8PL ✓same product

Qualcomm SD 450/625/820 — odczyt poza granicami bufora w obsłudze ramek 802.11

CVE-2018-11922CRITICAL9.8PL ✓same product

Qualcomm Touch Pal – zbieranie danych o użytkowniku bez jego wiedzy

CVE-2019-10505CRITICAL9.8PL ✓same product

Qualcomm Snapdragon: out-of-bounds read przy przetwarzaniu IE w ramkach pomiarowych

CVE-2019-10522CRITICAL9.8PL ✓same product

Buffer overflow w parserze multimediów Qualcomm — podatność krytyczna