PT-2018-17237 · Qualcomm · Snapdragon Mobile+1

Publicado 2018-11-28 · Atualizado 2018-12-26 · CVE-2018-5917

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Snapdragon Automobile versions MSM8996AU, SD 425, SD 430, SD 450, SD 625, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDA845, SDX24, SXR1130 Snapdragon Mobile versions MSM8996AU, SD 425, SD 430, SD 450, SD 625, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDA845, SDX24, SXR1130

Description: The issue is related to a possible buffer overflow in an OEM crypto function due to improper input validation.

Recommendations: For Snapdragon Automobile and Snapdragon Mobile versions MSM8996AU, SD 425, SD 430, SD 450, SD 625, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDA845, SDX24, SXR1130, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2018-5917

Produtos afetados

Snapdragon Automobile

Snapdragon Mobile

Referências · 3

• http://securityfocus.com/bid/105838 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-5917 · Nota de Segurança
• https://qualcomm.com/company/product-security/bulletins · Aviso do Fabricante