CVE-2016-10448

highPriorität · verfolgen · 39EPSS 0.009 · 60. PerzentilEUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.92% (60th) EPSS

CVSS 7.5 · high

Is it mine?

35 products

Prüfe deine Angriffsfläche

Who says so?

3 sources

cnnvd · enisa_euvd · nvd

EPSS · bewertet 2026-10-27

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835, SD 845, SD 850, and SDX20, a simultaneous command post for addSA or updateSA on same SA leads to memory corruption. APIs addSA and updateSA APIs access the global variable ipsec_sa_list[] outside of mutex protection.

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

9.8

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · high–critical · 7.5–9.8

v2.07.5highAV:N/AC:L/Au:N/C:P/I:P/A:Pprimary · NVD / NIST USAusnutzbarkeit 10 · Auswirkung 6.4

v3.09.8criticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USAusnutzbarkeit 3.9 · Auswirkung 5.9

v3.09criticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-119USprimär

betroffene Produkte (35)

Betroffene Produkte und Versionsbereiche.

Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear≤ MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835, SD 845, SD 850, SDX20enisa_euvdEU
qualcomm mdm9206 firmwarealle VersionennvdUScpe:2.3:o:qualcomm:mdm9206_firmware:*:*:*:*:*:*:*:*
qualcomm mdm9607 firmwarealle VersionennvdUScpe:2.3:o:qualcomm:mdm9607_firmware:*:*:*:*:*:*:*:*
qualcomm mdm9615 firmwarealle VersionennvdUScpe:2.3:o:qualcomm:mdm9615_firmware:*:*:*:*:*:*:*:*
qualcomm mdm9625 firmwarealle VersionennvdUScpe:2.3:o:qualcomm:mdm9625_firmware:*:*:*:*:*:*:*:*
qualcomm mdm9635m firmwarealle VersionennvdUScpe:2.3:o:qualcomm:mdm9635m_firmware:*:*:*:*:*:*:*:*
qualcomm mdm9640 firmwarealle VersionennvdUScpe:2.3:o:qualcomm:mdm9640_firmware:*:*:*:*:*:*:*:*
qualcomm mdm9645 firmwarealle VersionennvdUScpe:2.3:o:qualcomm:mdm9645_firmware:*:*:*:*:*:*:*:*
qualcomm mdm9650 firmwarealle VersionennvdUScpe:2.3:o:qualcomm:mdm9650_firmware:*:*:*:*:*:*:*:*
qualcomm mdm9655 firmwarealle VersionennvdUScpe:2.3:o:qualcomm:mdm9655_firmware:*:*:*:*:*:*:*:*
qualcomm msm8909w firmwarealle VersionennvdUScpe:2.3:o:qualcomm:msm8909w_firmware:*:*:*:*:*:*:*:*
qualcomm sd 205 firmwarealle VersionennvdUScpe:2.3:o:qualcomm:sd_205_firmware:*:*:*:*:*:*:*:*
qualcomm sd 210 firmwarealle VersionennvdUScpe:2.3:o:qualcomm:sd_210_firmware:*:*:*:*:*:*:*:*
qualcomm sd 212 firmwarealle VersionennvdUScpe:2.3:o:qualcomm:sd_212_firmware:*:*:*:*:*:*:*:*
qualcomm sd 400 firmwarealle VersionennvdUScpe:2.3:o:qualcomm:sd_400_firmware:*:*:*:*:*:*:*:*
qualcomm sd 410 firmwarealle VersionennvdUScpe:2.3:o:qualcomm:sd_410_firmware:*:*:*:*:*:*:*:*
qualcomm sd 412 firmwarealle VersionennvdUScpe:2.3:o:qualcomm:sd_412_firmware:*:*:*:*:*:*:*:*
qualcomm sd 415 firmwarealle VersionennvdUScpe:2.3:o:qualcomm:sd_415_firmware:*:*:*:*:*:*:*:*
qualcomm sd 425 firmwarealle VersionennvdUScpe:2.3:o:qualcomm:sd_425_firmware:*:*:*:*:*:*:*:*
qualcomm sd 430 firmwarealle VersionennvdUScpe:2.3:o:qualcomm:sd_430_firmware:*:*:*:*:*:*:*:*

20 von 35 angezeigt

auch bekannt als (3)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd nvd NVD CVE.org MITRE

veröffentlicht 2018-04-18geändert 2026-06-17

verwandt (21,043)

Verwandte Einträge.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2026-88779US	high7.5OT kritisch	11.4% (96th)	KEV	2026-10-04
Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before…
CVE-2026-88772US	high8.1OT kritisch	78.2% (100th)	KEV	2026-09-27
Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FI…
CVE-2026-8452US	critical9.8OT kritisch	1.01% (63rd)	KEV	2026-06-30
Memory overflow vulnerability NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if the appliance is configured as a Gateway (…
CVE-2026-53266US	—OT kritisch	0.93% (61st)	KEV	2026-06-25
In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: make ebt_snat ARP rewrite writable The ebtables SNAT target keeps the Ethernet source addre…
CVE-2026-3910US	high8.8OT kritisch	2.69% (86th)	KEV	2026-03-13
Inappropriate implementation in V8 in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium s…

+21038 weitere

Referenzen (5)

Externe Belege — Patches, Meldungen, Analysen.

https://source.android.com/security/bulletin/2018-04-01 cnnvd
http://www.securityfocus.com/bid/103671 enisa_euvd
https://source.android.com/security/bulletin/2018-04-01 enisa_euvd
http://www.securityfocus.com/bid/103671Third Party AdvisoryVDB Entrynvd
https://source.android.com/security/bulletin/2018-04-01Vendor Advisorynvd

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan