CVE-2016-10239
published 2017-05-16CVE-2016-10239: In TrustZone access control policy may potentially be bypassed in all Android releases from CAF using the Linux kernel due to improper input validation an…
PriorityP336high7.8CVSS 3.0
AVLACLPRNUIRSUCHIHAH
EPSS
0.65%
47.0th percentile
In TrustZone access control policy may potentially be bypassed in all Android releases from CAF using the Linux kernel due to improper input validation an integer overflow vulnerability leading to a buffer overflow could potentially occur and a buffer over-read vulnerability could potentially occur.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | — | — | |
| qualcomm_inc | all_qualcomm_products | — | — |
CVSS provenance
nvdv3.07.8HIGHCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.09.3CRITICALAV:N/AC:M/Au:N/C:C/I:C/A:C
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Android
CVE-2016-10239: Android Security Bulletin 2017-04-01
CVE: CVE-2016-10239
Severity: HIGH
References: A-31624618**
QC-CR#1032929
vendor_android·2017-04-01·CVSS 7.8
CVE-2016-10239 [HIGH] CVE-2016-10239: Android Security Bulletin 2017-04-01
CVE: CVE-2016-10239
Severity: HIGH
References: A-31624618**
QC-CR#1032929
Android Security Bulletin 2017-04-01
CVE: CVE-2016-10239
Severity: HIGH
References: A-31624618**
QC-CR#1032929
GHSA
GHSA-2w35-4j48-pw23: In TrustZone access control policy may potentially be bypassed in all Android releases from CAF using the Linux kernel due to improper input validatio
ghsa_unreviewed·2022-05-17
CVE-2016-10239 [HIGH] CWE-119 GHSA-2w35-4j48-pw23: In TrustZone access control policy may potentially be bypassed in all Android releases from CAF using the Linux kernel due to improper input validatio
In TrustZone access control policy may potentially be bypassed in all Android releases from CAF using the Linux kernel due to improper input validation an integer overflow vulnerability leading to a buffer overflow could potentially occur and a buffer over-read vulnerability could potentially occur.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2017-05-16
Published