NetSight
medium5.5

CVE-2018-13912

Arbitrary write issue can occur when user provides kernel address in compat mode in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdrag…

Impact

Arbitrary write issue can occur when user provides kernel address in compat mode in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS605, SD 210/SD 212/SD 205, SD 425, SD 439 / SD 429, SD 625, SD 636, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24.

Affected products

VendorProductAffected versions
QualcommSnapdragon Auto Firmware
All versions
QualcommSnapdragon Connectivity Firmware
All versions
QualcommSnapdragon Consumer Internet Of Things Firmware
All versions
QualcommSnapdragon Industrial Internet Of Things Firmware
All versions
QualcommSnapdragon Mobile Firmware
All versions
QualcommSnapdragon Voice \& Music Firmware
All versions
QualcommMdm9150 Firmware
All versions
QualcommMdm9206 Firmware
All versions
QualcommMdm9607 Firmware
All versions
QualcommMdm9640 Firmware
All versions
QualcommMdm9650 Firmware
All versions
QualcommMsm8909w Firmware
All versions

Weakness classification

References