PT-2018-6826 · Qualcomm · Snapdragon Mobile

Publicado 2018-10-26 · Atualizado 2018-12-11 · CVE-2017-18309

Positive Technologies (AI Summary)

CVSS v2.0

6.6

Média

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Mobile versions SD 845, SD 850

Description: A micro-core of QMP transportation may cause a macro-core to read from or write to arbitrary memory.

Recommendations: For versions SD 845 and SD 850, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Validation of Array Index

Enumeração de Fraquezas

CWE-129

Identificadores relacionados

CVE-2017-18309

Produtos afetados

Snapdragon Mobile

Referências · 3

• https://qualcomm.com/company/product-security/bulletins · Aviso do Fabricante
• http://securitytracker.com/id/1041432 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-18309 · Nota de Segurança