CVE-2016-10474: Buffer Overflow
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, and SD 850, if the buffer length passed to the RIL interface is too large, the buffer size calculation may overflow, resulting in an undersize allocation for the buffer, and subsequently buffer overwrite.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-10474?
The severity of CVE-2016-10474 is critical with a severity value of 9.8.
Which products are affected by CVE-2016-10474?
CVE-2016-10474 affects Google Android, Qualcomm Mdm9206 Firmware, Qualcomm Ipq4019 Firmware, Qualcomm Mdm9650 Firmware, Qualcomm Sd 210 Firmware, Qualcomm Sd 212 Firmware, Qualcomm Sd 205 Firmware, Qualcomm Sd 410 Firmware, Qualcomm Sd 412 Firmware, Qualcomm Sd 425 Firmware, Qualcomm Sd 430 Firmware, Qualcomm Sd 450 Firmware, Qualcomm Sd 615 Firmware, Qualcomm Sd 616 Firmware, Qualcomm Sd 415 Firmware, Qualcomm Sd 617 Firmware, Qualcomm Sd 625 Firmware, Qualcomm Sd 650 Firmware, Qualcomm Sd 652 Firmware, Qualcomm Sd 820a Firmware, Qualcomm Sd 808 Firmware, Qualcomm Sd 810 Firmware, Qualcomm Sd 820 Firmware, Qualcomm Sd 835 Firmware, Qualcomm Sd 845 Firmware, Qualcomm Sd 850 Firmware.
How can I fix CVE-2016-10474?
To fix CVE-2016-10474, you should apply the security patch level from April 2018 or later provided by Google or Qualcomm.
What is the Common Weakness Enumeration (CWE) for CVE-2016-10474?
The Common Weakness Enumeration (CWE) for CVE-2016-10474 is CWE-119.
Where can I find more information about CVE-2016-10474?
You can find more information about CVE-2016-10474 on the SecurityFocus and Android Security Bulletins websites.