NetSight
critical9.1

CVE-2018-11932

Improper input validation can lead RW access to secure subsystem from HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…

Impact

Improper input validation can lead RW access to secure subsystem from HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in versions MDM9650, MDM9655, MSM8996AU, QCS605, SD 410/12, SD 615/16/SD 415, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 8CX, SXR1130.

Affected products

VendorProductAffected versions
QualcommMdm9650 Firmware
All versions
QualcommMdm9655 Firmware
All versions
QualcommMsm8996au Firmware
All versions
QualcommQcs605 Firmware
All versions
QualcommSd 410 Firmware
All versions
QualcommSd 12 Firmware
All versions
QualcommSd 615 Firmware
All versions
QualcommSd 16 Firmware
All versions
QualcommSd 415 Firmware
All versions
QualcommSd 675 Firmware
All versions
QualcommSd 712 Firmware
All versions
QualcommSd 710 Firmware
All versions

Weakness classification

References