CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 8.1. It affects Android.
CVE
CVE-2016-10439
Severity
HIGH
CVSS
8.1
EPSS
0.81%
Android
Original NVD Description
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, and SD 820A, there is a TOCTOU vulnerability in the input validation for bulletin_board_read syscall. A pointer dereference is being validated without promising the pointer hasn't been changed by the HLOS program.
Related CVEs
Other vulnerabilities affecting the same vendor(s)