CVE-2016-10439

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level

Description The issue is related to a TOCTOU vulnerability in the input validation for the bulletin board read syscall. This vulnerability occurs because a pointer dereference is being validated without ensuring that the pointer hasn't been changed by the HLOS program.

Recommendations For Android versions prior to 2018-04-05 security patch level, update to a version with a security patch level of 2018-04-05 or later to resolve the issue.