PT-2018-1236 · Qualcomm+1 · Mdm9206+25
Publicado
2018-04-02
·
Atualizado
2018-05-01
·
CVE-2016-10425
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Android versions prior to 2018-04-05 security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, and SD 835
Description
The issue is caused by a buffer overflow in the Qualcomm GPT listener component of the Android operating system. This occurs when a large buffer offset is passed to the GPT listener response. Exploitation of this issue could allow a remote attacker to impact the confidentiality, integrity, and availability of protected information.
Recommendations
For Android versions prior to 2018-04-05 security patch level on the specified Qualcomm Snapdragon devices, update to a version with a security patch level of 2018-04-05 or later to resolve the issue.
As a temporary workaround, consider restricting the buffer size passed to the GPT listener response to prevent buffer overflow until a patch is available.
Correção
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Android
Mdm9206
Qualcomm Snapdragon Mobile
Qualcomm Snapdragon Wear
Sd 205
Sd 210
Sd 212
Sd 400
Sd 410
Sd 412
Sd 415
Sd 425
Sd 430
Sd 450
Sd 615
Sd 616
Sd 617
Sd 625
Sd 650
Sd 652
Sd 800
Sd 808
Sd 810
Sd 820
Sd 820A
Sd 835