CVEvulnerability
CVE-2018-13910
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2019-06-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-125
Description
Out-of-Bounds access in TZ due to invalid index calculated to check against DDR in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ8074, MDM9206, MDM9607, MDM9650, MDM9655, MSM8996AU, QCA8081, Qualcomm 215, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 650/52, SD 820, SD 820A, SDM439, Snapdragon_High_Med_2016
Affected configurations
• qualcomm ipq8074 firmware
• qualcomm mdm9206 firmware
• qualcomm mdm9607 firmware
• qualcomm mdm9650 firmware
• qualcomm mdm9655 firmware
• qualcomm msm8996au firmware
• qualcomm qca8081 firmware
• qualcomm qm215 firmware
• qualcomm sd 410 firmware
• qualcomm sd 412 firmware
• qualcomm sd 425 firmware
• qualcomm sd 427 firmware
• qualcomm sd 430 firmware
• qualcomm sd 435 firmware
• qualcomm sd 439 firmware
• qualcomm sd 429 firmware
• qualcomm sd 450 firmware
• qualcomm sd 625 firmware
• qualcomm sd 632 firmware
• qualcomm sd 650 firmware
• qualcomm sd 652 firmware
• qualcomm sd 820 firmware
• qualcomm sd 820a firmware
• qualcomm sdm439 firmware
• qualcomm snapdragon high med 2016 firmware
Related
Weakness · CWE (1)
- CWE-125 Out-of-bounds Read weakness
References
- https://www.qualcomm.com/company/product-security/bulletins Vendor Advisory
- https://www.qualcomm.com/company/product-security/bulletins Vendor Advisory