cvelist/2016/10xxx/CVE-2016-10442.json

{
   "CVE_data_meta" : {
      "ASSIGNER" : "product-security@qualcomm.com",
      "DATE_PUBLIC" : "2018-04-02T00:00:00",
      "ID" : "CVE-2016-10442",
      "STATE" : "PUBLIC"
   },
   "affects" : {
      "vendor" : {
         "vendor_data" : [
            {
               "product" : {
                  "product_data" : [
                     {
                        "product_name" : "Snapdragon Mobile",
                        "version" : {
                           "version_data" : [
                              {
                                 "version_value" : "MDM9640, SDM630, MSM8976, MSM8937, SDM845, MSM8976, MSM8952"
                              }
                           ]
                        }
                     }
                  ]
               },
               "vendor_name" : "Qualcomm, Inc."
            }
         ]
      }
   },
   "data_format" : "MITRE",
   "data_type" : "CVE",
   "data_version" : "4.0",
   "description" : {
      "description_data" : [
         {
            "lang" : "eng",
            "value" : "In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9640, SDM630, MSM8976, MSM8937, SDM845, MSM8976, and MSM8952, when running module or kernel code with improper access control allowing writing to arbitrary regions of memory, the user may utilize this vector to alter module executable code."
         }
      ]
   },
   "problemtype" : {
      "problemtype_data" : [
         {
            "description" : [
               {
                  "lang" : "eng",
                  "value" : "Code injection vulnerability when using kernel modules"
               }
            ]
         }
      ]
   },
   "references" : {
      "reference_data" : [
         {
            "name" : "https://source.android.com/security/bulletin/2018-04-01",
            "refsource" : "CONFIRM",
            "url" : "https://source.android.com/security/bulletin/2018-04-01"
         },
         {
            "name" : "103671",
            "refsource" : "BID",
            "url" : "http://www.securityfocus.com/bid/103671"
         }
      ]
   }
}