NetSight
high7.1

CVE-2018-5839

Improperly configured memory protection allows read/write access to modem image from HLOS kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IO…

Impact

Improperly configured memory protection allows read/write access to modem image from HLOS kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in versions MDM9150, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8996AU, QCS605, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM630, SDM660, SDX20, SXR1130.

Affected products

VendorProductAffected versions
QualcommSnapdragon Auto Firmware
All versions
QualcommSnapdragon Compute Firmware
All versions
QualcommSnapdragon Consumer Internet Of Things Firmware
All versions
QualcommSnapdragon Industrial Internet Of Things Firmware
All versions
QualcommMdm9150 Firmware
All versions
QualcommMdm9615 Firmware
All versions
QualcommMdm9625 Firmware
All versions
QualcommMdm9635m Firmware
All versions
QualcommMdm9640 Firmware
All versions
QualcommMdm9650 Firmware
All versions
QualcommMdm9655 Firmware
All versions
QualcommMsm8996au Firmware
All versions

Weakness classification

References