CVEvulnerability
CVE-2018-11828
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2018-10-26
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C
- Weaknesses
- CWE-400
Description
When FW tries to get random mac address generated from new SW RNG and ADC values read are constant then DUT get struck in loop while trying to get random ADC samples in Snapdragon Mobile in version SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52
Affected configurations
• qualcomm sd 210 firmware
• qualcomm sd 212 firmware
• qualcomm sd 205 firmware
• qualcomm sd 425 firmware
• qualcomm sd 430 firmware
• qualcomm sd 450 firmware
• qualcomm sd 625 firmware
• qualcomm sd 650 firmware
• qualcomm sd 652 firmware
Related
Weakness · CWE (1)
- CWE-400 Uncontrolled Resource Consumption weakness
References
- http://www.securityfocus.com/bid/107681 Third Party Advisory, VDB Entry
- https://www.qualcomm.com/company/product-security/bulletins Vendor Advisory
- http://www.securityfocus.com/bid/107681 Third Party Advisory, VDB Entry
- https://www.qualcomm.com/company/product-security/bulletins Vendor Advisory