← Vulnerability feed

Vulnerability record · CVE-2016-10496 · published 18 April 2018

CVE-2016-10496: Qualcomm mdm9635m firmware null pointer dereference vulnerability

Qualcomm · Mdm9635m Firmware

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9635M, SD 210/SD 212/SD 205, SD 410/12, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 808, and SD 810, A NULL pointer dereference can occur during an SSL handshake.

9.8 CVSS 3.0 Critical EPSS 1.4% · top 28.5% CWE-476 · NULL pointer dereference
9.8CVSS 3.0 base score, v2 10.0
1.4%EPSS exploitation probability, 30 days
NoNot in CISA KEV
15Affected product versions listed by NVD
4References
17 Jun 2026Last modified by NVD

Description

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9635M, SD 210/SD 212/SD 205, SD 410/12, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 808, and SD 810, A NULL pointer dereference can occur during an SSL handshake.

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

15 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.securityfocus.com/bid/103671 Third Party AdvisoryVDB Entry
https://source.android.com/security/bulletin/2018-04-01 Vendor Advisory
http://www.securityfocus.com/bid/103671 Third Party AdvisoryVDB Entry
https://source.android.com/security/bulletin/2018-04-01 Vendor Advisory

Track CVE-2016-10496 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2017-11076Qualcomm msm8909w firmware memory buffer overflow vulnerabilityOn some hardware revisions where VP9 decoding is hardware-accelerated, the frame size is not programmed correctly into the decoder hardware which can…EPSS 0.35%9.8CVE-2021-1919Qualcomm apq8009 firmware vulnerabilityInteger underflow can occur when the RTCP length is lesser than than the actual blocks present in Snapdragon Auto, Snapdragon Compute, Snapdragon Con…EPSS 0.80%9.8CVE-2021-1920Qualcomm apq8009 firmware vulnerabilityInteger underflow can occur due to improper handling of incoming RTCP packets in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdr…EPSS 0.80%9.8CVE-2021-1916Qualcomm apq8009 firmware out-of-bounds write vulnerabilityPossible buffer underflow due to lack of check for negative indices values when processing user provided input in Snapdragon Auto, Snapdragon Compute…EPSS 0.80%9.8CVE-2020-11279Qualcomm apq8009 firmware integer overflow vulnerabilityMemory corruption while processing crafted SDES packets due to improper length check in sdes packets recieved in Snapdragon Auto, Snapdragon Compute,…EPSS 0.82%9.8CVE-2020-11170Qualcomm apq8009 firmware classic buffer overflow vulnerabilityOut of bound memory access while playing music playbacks with crafted vorbis content due to improper checks in header extraction in Snapdragon Auto, …EPSS 0.83%9.8CVE-2019-14052Qualcomm apq8009 firmware use of uninitialized resource vulnerabilityu'Accessing an uninitialized data structure could result in partially copying of contents and thus incorrect processing' in Snapdragon Auto, Snapdrag…EPSS 0.91%9.8CVE-2019-14062Qualcomm apq8009 firmware classic buffer overflow vulnerabilityBuffer overflows while decoding setup message from Network due to lack of check of IE message length received from network in Snapdragon Auto, Snapdr…EPSS 0.90%

Source: NIST National Vulnerability Database (record CVE-2016-10496), CISA KEV, FIRST EPSS (scores of 2026-10-14). This page is refreshed as NVD updates the record.