← Volver a CVEs
CVE-2016-10489
N/ADescripcion
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 400, lack of address argument validation in qsee_get_tz_app_name() may lead to an untrusted pointer dereference.
Detalles CVE
Puntuacion CVSS v3.1N/A
Publicado4/18/2018
Ultima modificacion11/21/2024
Fuentenvd
Avistamientos honeypot0
Productos afectados
qualcomm:sd_400qualcomm:sd_400_firmware
Debilidades (CWE)
CWE-476
Referencias
http://www.securityfocus.com/bid/103671(product-security@qualcomm.com)
https://source.android.com/security/bulletin/2018-04-01(product-security@qualcomm.com)
http://www.securityfocus.com/bid/103671(af854a3a-2127-422b-91ae-364da2661108)
https://source.android.com/security/bulletin/2018-04-01(af854a3a-2127-422b-91ae-364da2661108)
Correlaciones IOC
Sin correlaciones registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.