CVE-2016-10442: Qualcomm MDM9640 Firmware

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9640, SDM630, MSM8976, MSM8937, SDM845, MSM8976, and MSM8952, when running module or kernel code with improper access control allowing writing to arbitrary regions of memory, the user may utilize this vector to alter module executable code.

Affected products

• Qualcomm MDM9640 Firmware: affected versions not specified
• Qualcomm MDM9650 Firmware: affected versions not specified
• Qualcomm MSM8937 Firmware: affected versions not specified
• Qualcomm MSM8952 Firmware: affected versions not specified
• Qualcomm MSM8976 Firmware: affected versions not specified
• Qualcomm SDM630 Firmware: affected versions not specified
• Qualcomm SDM845 Firmware: affected versions not specified

Published 2018-04-18. Last modified 2026-06-17.