CVE-2016-10467
Summary
| CVE | CVE-2016-10467 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2018-04-18 14:29:00 UTC |
| Updated | 2018-05-01 16:54:00 UTC |
| Description | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, SD 617, SD 650/52, SD 800, SD 808, SD 820, and SD 820A, function ce_pkcs1_pss_padding_verify_auto_recover_saltlen assumes that the size of the encoded message is equal to the size of the RSA modulus. This assumption is true for most RSA keys, but it fails when modulus_bitlen % 8 == 1. |
Risk And Classification
Problem Types: CWE-320
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Qualcomm | Sd 205 | - | All | All | All |
| Hardware | Qualcomm | Sd 205 | - | All | All | All |
| Operating System | Qualcomm | Sd 205 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 205 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sd 210 | - | All | All | All |
| Hardware | Qualcomm | Sd 210 | - | All | All | All |
| Operating System | Qualcomm | Sd 210 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 210 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sd 212 | - | All | All | All |
| Hardware | Qualcomm | Sd 212 | - | All | All | All |
| Operating System | Qualcomm | Sd 212 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 212 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sd 400 | - | All | All | All |
| Hardware | Qualcomm | Sd 400 | - | All | All | All |
| Operating System | Qualcomm | Sd 400 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 400 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sd 410 | - | All | All | All |
| Hardware | Qualcomm | Sd 410 | - | All | All | All |
| Operating System | Qualcomm | Sd 410 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 410 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sd 412 | - | All | All | All |
| Hardware | Qualcomm | Sd 412 | - | All | All | All |
| Operating System | Qualcomm | Sd 412 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 412 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sd 415 | - | All | All | All |
| Hardware | Qualcomm | Sd 415 | - | All | All | All |
| Operating System | Qualcomm | Sd 415 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 415 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sd 615 | - | All | All | All |
| Hardware | Qualcomm | Sd 615 | - | All | All | All |
| Operating System | Qualcomm | Sd 615 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 615 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sd 616 | - | All | All | All |
| Hardware | Qualcomm | Sd 616 | - | All | All | All |
| Operating System | Qualcomm | Sd 616 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 616 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sd 617 | - | All | All | All |
| Hardware | Qualcomm | Sd 617 | - | All | All | All |
| Operating System | Qualcomm | Sd 617 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 617 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sd 650 | - | All | All | All |
| Hardware | Qualcomm | Sd 650 | - | All | All | All |
| Operating System | Qualcomm | Sd 650 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 650 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sd 652 | - | All | All | All |
| Hardware | Qualcomm | Sd 652 | - | All | All | All |
| Operating System | Qualcomm | Sd 652 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 652 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sd 800 | - | All | All | All |
| Hardware | Qualcomm | Sd 800 | - | All | All | All |
| Operating System | Qualcomm | Sd 800 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 800 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sd 808 | - | All | All | All |
| Hardware | Qualcomm | Sd 808 | - | All | All | All |
| Operating System | Qualcomm | Sd 808 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 808 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sd 820 | - | All | All | All |
| Hardware | Qualcomm | Sd 820 | - | All | All | All |
| Hardware | Qualcomm | Sd 820a | - | All | All | All |
| Hardware | Qualcomm | Sd 820a | - | All | All | All |
| Operating System | Qualcomm | Sd 820a Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 820a Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 820 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 820 Firmware | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Google Android Multiple Qualcomm Components Multiple Unspecified Security Vulnerabilities | BID | www.securityfocus.com | Third Party Advisory, VDB Entry |
| Android Security Bulletin—April 2018 | Android Open Source Project | CONFIRM | source.android.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.