PT-2018-16079 · Qualcomm · Snapdragon

Publicado 2018-10-26 · Atualizado 2019-10-03 · CVE-2018-3588

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 820, SD 820A, SD 835, SDA660

Description The issue is related to improper access control of the SSC and GPU mapped regions, allowing code injection from HLOS in various Snapdragon products, including Automobile, Mobile, and Wear devices.

Recommendations For versions MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 820, SD 820A, SD 835, SDA660, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2018-3588

Produtos afetados

Snapdragon

Referências · 2

• https://qualcomm.com/company/product-security/bulletins · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-3588 · Nota de Segurança