PT-2019-8860 · Qualcomm · Snapdragon

Publicado 2019-01-18 · Atualizado 2019-01-24 · CVE-2018-11998

Positive Technologies (AI Summary)

CVSS v2.0

7.9

Alta

Vetor base

AV:A/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions MDM9206, MDM9607, SD 210/SD 212/SD 205, SD 427, SD 435, SD 450, SD 625, SD 636, SD 835, SDA660, SDM630, SDM660, Snapdragon High Med 2016

Description A race condition can occur while processing a packet decode request in MQTT, leading to an out-of-bounds access in Snapdragon mobile and Snapdragon wear.

Recommendations For versions MDM9206, MDM9607, SD 210/SD 212/SD 205, SD 427, SD 435, SD 450, SD 625, SD 636, SD 835, SDA660, SDM630, SDM660, Snapdragon High Med 2016, at the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Race Condition

Enumeração de Fraquezas

CWE-362

Identificadores relacionados

CVE-2018-11998

Produtos afetados

Snapdragon

Referências · 2

• https://qualcomm.com/company/product-security/bulletins · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-11998 · Nota de Segurança