CVE-2016-10338

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In all Android releases from CAF using the Linux kernel, there was an issue related to RPMB processing.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published
Jun 13, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2016

CVE-2016-103397.1In all Android releases from CAF using the Linux kernel, HLOS can overwite secure memory or read contents of the keystore.CVE-2016-10349.1The Sync Process in the JavaScript API for Creative Cloud Libraries in Adobe Creative Cloud Desktop Application before 3.6.0.244 allows remoCVE-2016-103407.8In all Android releases from CAF using the Linux kernel, an integer underflow leading to buffer overflow vulnerability exists in a syscall hCVE-2016-103417.8In all Android releases from CAF using the Linux kernel, 3rd party TEEs have more privilege than intended.CVE-2016-103427.8In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a syscall handler.CVE-2016-103439.8In all Qualcomm products with Android releases from CAF using the Linux kernel, sSL handshake failure with ClientHello rejection results in CVE-2016-103449.8In all Qualcomm products with Android releases from CAF using the Linux kernel, the use of an out-of-range pointer offset is potentially posCVE-2016-103457.8In Phusion Passenger before 5.1.0, a known /tmp filename was used during passenger-install-nginx-module execution, which could allow local aCVE-2016-103469.8In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow vulnerability exists in the hypervisor.CVE-2016-103479.8In all Qualcomm products with Android releases from CAF using the Linux kernel, an argument to a hypervisor function is not properly validatCVE-2016-103495.5The archive_le32dec function in archive_endian.h in libarchive 3.2.2 allows remote attackers to cause a denial of service (heap-based bufferCVE-2016-10357.5Adobe RoboHelp Server 9 before 9.0.1 mishandles SQL queries, which allows attackers to obtain sensitive information via unspecified vectors.
CVE-2016-10338: High severity, CVSS 7.8 | Vulnix