PT-2018-6826 · Qualcomm · Snapdragon Mobile

Published 2018-10-26 · Updated 2018-12-11 · CVE-2017-18309

Positive Technologies (AI Summary)

CVSS v2.0

6.6

Medium

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Mobile versions SD 845, SD 850

Description: A micro-core of QMP transportation may cause a macro-core to read from or write to arbitrary memory.

Recommendations: For versions SD 845 and SD 850, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Validation of Array Index

Weakness Enumeration

CWE-129

Related Identifiers

CVE-2017-18309

Affected Products

Snapdragon Mobile

References · 3

• https://qualcomm.com/company/product-security/bulletins · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-18309 · Security Note
• http://securitytracker.com/id/1041432 · Note