First published: Mon Apr 02 2018(Updated: )
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 820, SD 820A, and SD 835, SMMU Access Control Policy was updated to block HLOS from accessing BLSP and BAM resources.
Credit: product-security@qualcomm.com
Affected Software | Affected Version | How to fix |
---|---|---|
Qualcomm Mdm9206 Firmware | ||
Qualcomm Mdm9206 | ||
Qualcomm Sd 210 Firmware | ||
Qualcomm Sd 210 | ||
Qualcomm Sd 212 Firmware | ||
Qualcomm Sd 212 | ||
Qualcomm Sd 205 Firmware | ||
Qualcomm Sd 205 | ||
Qualcomm Sd 425 Firmware | ||
Qualcomm Sd 425 | ||
Qualcomm Sd 430 Firmware | ||
Google Android | ||
Qualcomm Sd 450 Firmware | ||
Qualcomm Sd 450 | ||
Qualcomm Sd 625 Firmware | ||
Qualcomm Sd 625 | ||
Qualcomm Sd 835 Firmware | ||
Qualcomm Sd 835 | ||
Google Android | ||
Google Android | ||
Qualcomm Sd 820a Firmware | ||
Qualcomm Sd 820a | ||
Android |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2016-10444 is considered moderate due to the potential for unauthorized access.
To mitigate CVE-2016-10444, update your device to the latest security patch provided by the vendor.
CVE-2016-10444 affects various Qualcomm Snapdragon models including SD 210, SD 212, SD 205, SD 425, among others, and certain Android versions prior to the April 2018 security patch.
CVE-2016-10444 is not known to be remotely exploitable, but could be targeted through physical access.
Exploitation of CVE-2016-10444 could allow a malicious application to gain unauthorized access to lower-level hardware components.