CVE-2016-10471: Critical severity Google Android vulnerability
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, and SD 820A, an unsigned RTIC health report susceptible to tampering by malware executing in the context of the HLOS may be requested.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-10471?
CVE-2016-10471 has been classified as a critical vulnerability due to its potential to be exploited by malware for tampering with health reports.
How do I fix CVE-2016-10471?
The recommended fix for CVE-2016-10471 is to update your Android device to the security patch level of 2018-04-05 or later.
Which versions of Android are affected by CVE-2016-10471?
CVE-2016-10471 affects Android versions before the security patch level of 2018-04-05.
What devices are impacted by CVE-2016-10471?
Devices utilizing Qualcomm Snapdragon 425, 430, 450, 625, 650, 820, and 820A platforms prior to the specified patch are affected by CVE-2016-10471.
Can CVE-2016-10471 be exploited remotely?
Yes, CVE-2016-10471 can potentially be exploited remotely by malware executing within the context of the higher-level operating system.