CVE-2016-10454: Qualcomm Sd 425 Firmware

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 425, SD 430, SD 450, and SD 625, in a QTEE API function, an array out-of-bounds index can occur.

Affected products

• Qualcomm Sd 425 Firmware: affected versions not specified
• Qualcomm Sd 430 Firmware: affected versions not specified
• Qualcomm Sd 450 Firmware: affected versions not specified
• Qualcomm Sd 625 Firmware: affected versions not specified

Published 2018-04-18. Last modified 2026-06-17.