high7.8
CVE-2018-13913
Improper validation of array index can lead to unauthorized access while processing debugFS in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial …
Impact
Improper validation of array index can lead to unauthorized access while processing debugFS in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in version MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS605, SD 210/SD 212/SD 205, SD 425, SD 439 / SD 429, SD 615/16/SD 415, SD 625, SD 636, SD 650/52, SD 712 / SD 710 / SD 670, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Qualcomm | Snapdragon Auto Firmware | All versions |
| Qualcomm | Snapdragon Consumer Internet Of Things Firmware | All versions |
| Qualcomm | Snapdragon Industrial Internet Of Things Firmware | All versions |
| Qualcomm | Snapdragon Internet Of Things Firmware | All versions |
| Qualcomm | Snapdragon Mobile Firmware | All versions |
| Qualcomm | Snapdragon Voice \& Music Firmware | All versions |
| Qualcomm | Mdm9150 Firmware | All versions |
| Qualcomm | Mdm9206 Firmware | All versions |
| Qualcomm | Mdm9607 Firmware | All versions |
| Qualcomm | Mdm9640 Firmware | All versions |
| Qualcomm | Mdm9650 Firmware | All versions |
| Qualcomm | Msm8909w Firmware | All versions |