CVE-2016-10442: Code Injection
First published: Mon Apr 02 2018(Updated: )
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9640, SDM630, MSM8976, MSM8937, SDM845, MSM8976, and MSM8952, when running module or kernel code with improper access control allowing writing to arbitrary regions of memory, the user may utilize this vector to alter module executable code.
Credit: product-security@qualcomm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| qualcomm mdm9640 firmware | ||
| qualcomm MDM9640 | ||
| qualcomm SDM630 firmware | ||
| qualcomm SDM630 | ||
| Qualcomm MDM9650 firmware | ||
| Qualcomm MDM9650 | ||
| Qualcomm 8976 Firmware | ||
| Qualcomm 8976 | ||
| qualcomm MSM8937 firmware | ||
| qualcomm MSM8937 | ||
| qualcomm SDM845 firmware | ||
| qualcomm SDM845 | ||
| Qualcomm 8952 Firmware | ||
| Qualcomm 8952 | ||
| Android |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2016-10442?
CVE-2016-10442 is classified as a high severity vulnerability affecting certain Android devices.
How do I fix CVE-2016-10442?
To fix CVE-2016-10442, ensure that your Android device is updated to the security patch level of 2018-04-05 or later.
Which devices are affected by CVE-2016-10442?
CVE-2016-10442 affects devices running Qualcomm Snapdragon Mobile MDM9640, SDM630, MSM8976, MSM8937, SDM845, MSM8976, and MSM8952.
What types of attacks can exploit CVE-2016-10442?
CVE-2016-10442 can be exploited through improper access control allowing an attacker to write to arbitrary regions of memory.
When was CVE-2016-10442 published?
CVE-2016-10442 was published in 2016 and affects specific Android versions prior to the April 2018 security patch.
- agent/type
- agent/references
- agent/first-publish-date
- agent/author
- agent/severity
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/last-modified-date
- agent/event
- agent/source
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/tags
- collector/android-source
- source/Android
- agent/software-canonical-lookup
- vendor/qualcomm
- canonical/qualcomm mdm9640 firmware
- canonical/qualcomm mdm9640
- canonical/qualcomm sdm630 firmware
- canonical/qualcomm sdm630
- canonical/qualcomm mdm9650 firmware
- canonical/qualcomm mdm9650
- canonical/qualcomm 8976 firmware
- canonical/qualcomm 8976
- canonical/qualcomm msm8937 firmware
- canonical/qualcomm msm8937
- canonical/qualcomm sdm845 firmware
- canonical/qualcomm sdm845
- canonical/qualcomm 8952 firmware
- canonical/qualcomm 8952
- vendor/google
- canonical/android