CVEvulnerability

CVE-2018-11932

9.1 CRITICAL Published 2019-02-25 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-02-25
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
9.1 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS 2.0 ([email protected])
6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N
Weaknesses
CWE-20

Description

Improper input validation can lead RW access to secure subsystem from HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in versions MDM9650, MDM9655, MSM8996AU, QCS605, SD 410/12, SD 615/16/SD 415, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 8CX, SXR1130.

Affected configurations

• qualcomm mdm9650 firmware • qualcomm mdm9655 firmware • qualcomm msm8996au firmware • qualcomm qcs605 firmware • qualcomm sd 410 firmware • qualcomm sd 12 firmware • qualcomm sd 615 firmware • qualcomm sd 16 firmware • qualcomm sd 415 firmware • qualcomm sd 675 firmware • qualcomm sd 712 firmware • qualcomm sd 710 firmware • qualcomm sd 670 firmware • qualcomm sd 820 firmware • qualcomm sd 820a firmware • qualcomm sd 835 firmware • qualcomm sd 845 firmware • qualcomm sd 850 firmware • qualcomm sd 8cx firmware • qualcomm sxr1130 firmware

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References