CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. It affects Android.
CVE
CVE-2016-10474
Severity
CRITICAL
CVSS
9.8
EPSS
1.25%
Android
Original NVD Description
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, and SD 850, if the buffer length passed to the RIL interface is too large, the buffer size calculation may overflow, resulting in an undersize allocation for the buffer, and subsequently buffer overwrite.
Related CVEs
Other vulnerabilities affecting the same vendor(s)