CVE-2016-10419

EUVD-2016-1601
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9640, MDM9645, MDM9650, MDM9655, SD 450, SD 625, SD 650/52, SD 820, SD 835, SD 845, SD 850, and SDX20, when initializing scheduler object service request, an out of bounds access could occur due to uninitialized object number.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 42%
Affected Products (NVD)
VendorProductVersion
qualcommmdm9640_firmware
-
qualcommmdm9645_firmware
-
qualcommmdm9650_firmware
-
qualcommmdm9655_firmware
-
qualcommsd_450_firmware
-
qualcommsd_625_firmware
-
qualcommsd_650_firmware
-
qualcommsd_652_firmware
-
qualcommsd_820_firmware
-
qualcommsd_835_firmware
-
qualcommsd_845_firmware
-
qualcommsdx20_firmware
-
qualcommsd_850_firmware
-
𝑥
= Vulnerable software versions