PT-2019-8810 · Qualcomm · Snapdragon Mobile+7

Published

2019-02-25

·

Updated

2019-02-28

·

CVE-2018-11845

CVSS v2.0

4.9

Medium

VectorAV:L/AC:L/Au:N/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions Snapdragon Auto versions MDM9150 through MDM9655 Snapdragon Compute versions MDM9150 through MDM9655 Snapdragon Connectivity versions MDM9150 through MDM9655 Snapdragon Consumer Electronics Connectivity versions MDM9150 through MDM9655 Snapdragon Consumer IOT versions MDM9150 through MDM9655 Snapdragon Industrial IOT versions MDM9150 through MDM9655 Snapdragon Mobile versions MDM9150 through MDM9655 Snapdragon Voice & Music versions MDM9150 through MDM9655 Snapdragon versions MSM8996AU Snapdragon versions QCS605 Snapdragon versions SD 210/SD 212/SD 205 Snapdragon versions SD 410/12 Snapdragon versions SD 425 Snapdragon versions SD 427 Snapdragon versions SD 430 Snapdragon versions SD 435 Snapdragon versions SD 439 / SD 429 Snapdragon versions SD 450 Snapdragon versions SD 625 Snapdragon versions SD 632 Snapdragon versions SD 636 Snapdragon versions SD 650/52 Snapdragon versions SD 675 Snapdragon versions SD 712 / SD 710 / SD 670 Snapdragon versions SD 820 Snapdragon versions SD 820A Snapdragon versions SD 835 Snapdragon versions SD 845 / SD 850 Snapdragon versions SD 8CX Snapdragon versions SDA660 Snapdragon versions SDM439 Snapdragon versions SDM630 Snapdragon versions SDM660 Snapdragon versions Snapdragon High Med 2016 Snapdragon versions SXR1130
Description The usage of non-time-constant comparison functions can lead to information leakage through side channel analysis.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2018-11845

Affected Products

Snapdragon Auto
Snapdragon Compute
Snapdragon Connectivity
Snapdragon Consumer Electronics Connectivity
Snapdragon Consumer Iot
Snapdragon Industrial Iot
Snapdragon Mobile
Snapdragon Voice & Music