{"id":"CVE-2016-10389","aliases":["EUVD-2016-1571","GHSA-63qh-xc4p-2395"],"status":"published","title":"In all Qualcomm products with Android releases from CAF using the Linux kernel, there is no size...","description":"In all Qualcomm products with Android releases from CAF using the Linux kernel, there is no size check for the images being flashed onto the NAND memory in their respective partitions, so there is a possibility of writing beyond the intended partition.","severity":{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.00497,"percentile":0.42869,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-119"],"published":"2017-08-18T18:00:00Z","modified":"2026-06-17T00:39:35Z","products":[{"vendor":"google","product":"android"},{"vendor":"qualcomm, inc.","product":"all qualcomm products"}],"references":[{"url":"https://source.android.com/security/bulletin/2017-07-01","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/99465","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-10389"},{"url":"https://github.com/advisories/GHSA-63qh-xc4p-2395"}],"sources":{"cve":[{"id":"CVE-2016-10389","description":"In all Qualcomm products with Android releases from CAF using the Linux kernel, there is no size check for the images being flashed onto the NAND memory in their respective partitions, so there is a possibility of writing beyond the intended partition.","status":"published","published":"2017-08-18T18:00:00Z","modified":"2024-09-17T03:32:28.461Z","updated_at":"2026-11-02T14:33:31.117878Z"}],"euvd":[{"id":"EUVD-2016-1571","description":"In all Qualcomm products with Android releases from CAF using the Linux kernel, there is no size check for the images being flashed onto the NAND memory in their respective partitions, so there is a possibility of writing beyond the intended partition.","status":"published","published":"2017-08-18T18:00:00Z","modified":"2024-09-17T03:32:28Z","updated_at":"2026-11-03T00:28:31.175316Z"}],"ghsa":[{"id":"GHSA-63qh-xc4p-2395","title":"In all Qualcomm products with Android releases from CAF using the Linux kernel, there is no size...","description":"In all Qualcomm products with Android releases from CAF using the Linux kernel, there is no size check for the images being flashed onto the NAND memory in their respective partitions, so there is a possibility of writing beyond the intended partition.","status":"published","published":"2022-05-17T01:58:24Z","modified":"2023-02-03T05:06:13Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:53:51.728884Z"}],"nvd":[{"id":"CVE-2016-10389","description":"In all Qualcomm products with Android releases from CAF using the Linux kernel, there is no size check for the images being flashed onto the NAND memory in their respective partitions, so there is a possibility of writing beyond the intended partition.","status":"published","published":"2017-08-18T18:29:03.017Z","modified":"2026-06-17T00:39:35.053Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:03:39.176887Z"}]}}