CVEvulnerability

CVE-2018-13904

9.8 CRITICAL Published 2019-02-25 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-02-25
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-20

Description

Improper input validation in SCM handler to access storage in TZ can lead to unauthorized access in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in versions MDM9206, MDM9607, MDM9650, MDM9655, QCS605, SD 410/12, SD 675, SD 712 / SD 710 / SD 670, SD 8CX, SXR1130.

Affected configurations

• qualcomm mdm9206 firmware • qualcomm mdm9607 firmware • qualcomm mdm9650 firmware • qualcomm mdm9655 firmware • qualcomm qcs605 firmware • qualcomm sd 410 firmware • qualcomm sd 12 firmware • qualcomm sd 675 firmware • qualcomm sd 712 firmware • qualcomm sd 710 firmware • qualcomm sd 670 firmware • qualcomm sd 8cx firmware • qualcomm sxr1130 firmware

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References