CVE-2016-10335

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In all Android releases from CAF using the Linux kernel, libtomcrypt was updated.

Metrics

CVSS 3.0 5.5/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-284

Affected software

VendorProductVersions
Qualcomm, Inc.All Qualcomm productsAll Android releases from CAF using the Linux kernel

References

Timeline

Published
Jun 13, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2016

CVE-2016-103365.5In all Android releases from CAF using the Linux kernel, some regions of memory were not protected during boot.CVE-2016-103375.5In all Android releases from CAF using the Linux kernel, some validation of secure applications was not being performed.CVE-2016-103387.8In all Android releases from CAF using the Linux kernel, there was an issue related to RPMB processing.CVE-2016-103397.1In all Android releases from CAF using the Linux kernel, HLOS can overwite secure memory or read contents of the keystore.CVE-2016-10349.1The Sync Process in the JavaScript API for Creative Cloud Libraries in Adobe Creative Cloud Desktop Application before 3.6.0.244 allows remoCVE-2016-103407.8In all Android releases from CAF using the Linux kernel, an integer underflow leading to buffer overflow vulnerability exists in a syscall hCVE-2016-103417.8In all Android releases from CAF using the Linux kernel, 3rd party TEEs have more privilege than intended.CVE-2016-103427.8In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a syscall handler.CVE-2016-103439.8In all Qualcomm products with Android releases from CAF using the Linux kernel, sSL handshake failure with ClientHello rejection results in CVE-2016-103449.8In all Qualcomm products with Android releases from CAF using the Linux kernel, the use of an out-of-range pointer offset is potentially posCVE-2016-103457.8In Phusion Passenger before 5.1.0, a known /tmp filename was used during passenger-install-nginx-module execution, which could allow local aCVE-2016-103469.8In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow vulnerability exists in the hypervisor.
CVE-2016-10335: Medium severity, CVSS 5.5 | Vulnix