Back to feed
EUVD-2018-17636 · Published Jan 18, 2019
Improper input validation in the QTEE keymaster app can lead to invalid memory access in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 615/16/SD 415, SD 800, SD 810
Technologies
Qualcomm Sd 210Qualcomm Sd 205Qualcomm Sd 212Qualcomm Sd 412Qualcomm Mdm9607Qualcomm Sd 810Qualcomm Sd 410 FirmwareQualcomm Sd 800 FirmwareQualcomm Sd 615Qualcomm Sd 616Qualcomm Sd 616 FirmwareQualcomm Mdm9206Qualcomm Mdm9206 FirmwareQualcomm Sd 212 FirmwareQualcomm Sd 410Qualcomm Sd 810 FirmwareQualcomm Msm8909W FirmwareQualcomm Sd 615 FirmwareQualcomm Sd 205 FirmwareQualcomm Msm8909WQualcomm Sd 210 FirmwareQualcomm Sd 415Qualcomm Sd 800Qualcomm Sd 415 FirmwareQualcomm Mdm9607 FirmwareQualcomm Sd 412 Firmware
Weaknesses
CWE-20
CVSS scores
- v3.07.8
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - v2.07.2
AV:L/AC:L/Au:N/C:C/I:C/A:C
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Privilege Escalation
References
Potentially impacted assets
See if this affects your attack surface
