High severity8.1NVD Advisory· Published Apr 18, 2018· Updated Jun 17, 2026
CVE-2016-10439
CVE-2016-10439
Description
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, and SD 820A, there is a TOCTOU vulnerability in the input validation for bulletin_board_read syscall. A pointer dereference is being validated without promising the pointer hasn't been changed by the HLOS program.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
12- cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sd_820a_firmware:-:*:*:*:*:*:*:*
- Range: < 2018-04-05 security patch level
- Range: < 2018-04-05 security patch level
- Qualcomm, Inc./Snapdragon Automobile, Snapdragon Mobilev5Range: SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, SD 820A
Patches
Vulnerability mechanics
References
2- www.securityfocus.com/bid/103671nvdThird Party AdvisoryVDB Entry
- source.android.com/security/bulletin/2018-04-01nvdVendor Advisory
News mentions
0No linked articles in our index yet.