Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.1

Android on Qualcomm Snapdragon chips may mishandle secure storage requests

CVE-2016-10409 · published 8 years ago
Summary

Android versions released before the April 5 2018 security update on Snapdragon models SD 425, SD 430, SD 450, SD 625, SD 650, SD 820, SD 820A and SD 835 can experience a timing error when the system builds a request to the protected RPMB storage area. This error could allow an attacker to alter or read data that should be protected. Apply the latest Android security patches or firmware updates for the affected Snapdragon chips to eliminate the risk.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
qualcomm sd_425_firmware All versions
cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*
qualcomm sd_430_firmware All versions
cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*
qualcomm sd_450_firmware All versions
cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*
qualcomm sd_625_firmware All versions
cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*
qualcomm sd_650_firmware All versions
cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*
qualcomm sd_652_firmware All versions
cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*
qualcomm sd_820_firmware All versions
cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*
qualcomm sd_835_firmware All versions
cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*
qualcomm sd_820a_firmware All versions
cpe:2.3:o:qualcomm:sd_820a_firmware:-:*:*:*:*:*:*:*
Original advisory text
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, SD 820A, and SD 835, TOCTOU v...
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, SD 820A, and SD 835, TOCTOU vulnerability may occur while composing the RPMB request using HLOS controlled buffers.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker full control (estimated)
Severity
8.1 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-362Race Condition
Timeline
Published18 Apr 2018
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2016-10409 · NVD
Track software like this
Free during beta