CVE-2016-10428: Infoleak

First published: Mon Apr 02 2018(Updated: )

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, and SD 820A, HMAC verification in counter file uses an insecure memcmp which may assist a timing attack.

Credit: product-security@qualcomm.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• agent/references
• agent/type
• agent/first-publish-date
• agent/author
• agent/severity
• agent/weakness
• agent/description
• agent/event
• collector/nvd-index
• agent/software-canonical-lookup-request
• agent/softwarecombine
• agent/tags
• collector/android-source
• source/Android
• agent/software-canonical-lookup
• agent/last-modified-date
• collector/mitre-cve
• source/MITRE
• vendor/qualcomm
• canonical/qualcomm sd 425 firmware
• canonical/qualcomm sd 425
• canonical/qualcomm sd 430 firmware
• canonical/qualcomm sd 430
• canonical/qualcomm sd 450 firmware
• canonical/qualcomm sd 450
• canonical/qualcomm sd 625 firmware
• canonical/qualcomm sd 625
• canonical/qualcomm sd 650 firmware
• canonical/qualcomm sd 650
• canonical/qualcomm sd 652 firmware
• canonical/qualcomm sd 652
• canonical/qualcomm sd 820 firmware
• canonical/qualcomm sd 820
• canonical/qualcomm sd 820a firmware
• canonical/qualcomm sd 820a
• vendor/google
• canonical/google android