PT-2019-8862 · Qualcomm · Sda660+41

Published

2019-05-24

·

Updated

2019-05-29

·

CVE-2018-12005

CVSS v2.0

4.9

Medium

VectorAV:L/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon Auto versions (affected versions not specified) Qualcomm Snapdragon Compute versions (affected versions not specified) Qualcomm Snapdragon Consumer IOT versions (affected versions not specified) Qualcomm Snapdragon Industrial IOT versions (affected versions not specified) Qualcomm Snapdragon Mobile versions (affected versions not specified) Qualcomm Snapdragon Voice & Music versions (affected versions not specified) Qualcomm Snapdragon Wearables versions (affected versions not specified) MDM9150 (affected versions not specified) MDM9206 (affected versions not specified) MDM9607 (affected versions not specified) MDM9640 (affected versions not specified) MDM9650 (affected versions not specified) MSM8909W (affected versions not specified) MSM8996AU (affected versions not specified) QCS605 (affected versions not specified) Qualcomm 215 (affected versions not specified) SD 210/SD 212/SD 205 (affected versions not specified) SD 425 (affected versions not specified) SD 439 / SD 429 (affected versions not specified) SD 450 (affected versions not specified) SD 625 (affected versions not specified) SD 632 (affected versions not specified) SD 636 (affected versions not specified) SD 675 (affected versions not specified) SD 712 / SD 710 / SD 670 (affected versions not specified) SD 820A (affected versions not specified) SD 835 (affected versions not specified) SD 845 / SD 850 (affected versions not specified) SD 855 (affected versions not specified) SDA660 (affected versions not specified) SDM439 (affected versions not specified) SDM630 (affected versions not specified) SDM660 (affected versions not specified) SDX20 (affected versions not specified) SDX24 (affected versions not specified) SM7150 (affected versions not specified)
Description An unprivileged user can issue a binder call and cause a system halt. This issue affects various Qualcomm Snapdragon products, including Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, and Snapdragon Wearables, as well as several specific chipsets.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2018-12005

Affected Products

Mdm9150
Mdm9206
Mdm9607
Mdm9640
Mdm9650
Msm8909W
Msm8996Au
Qcs605
Qualcomm 215
Qualcomm Snapdragon Auto
Qualcomm Snapdragon Compute
Qualcomm Snapdragon Consumer Iot
Qualcomm Snapdragon Industrial Iot
Qualcomm Snapdragon Mobile
Qualcomm Snapdragon Voice & Music
Qualcomm Snapdragon Wearables
Sd 205
Sd 210
Sd 212
Sd 425
Sd 429
Sd 439
Sd 450
Sd 625
Sd 632
Sd 636
Sd 670
Sd 675
Sd 710
Sd 712
Sd 820A
Sd 835
Sd 845
Sd 850
Sd 855
Sda660
Sdm439
Sdm630
Sdm660
Sdx20
Sdx24
Sm7150