CVE-2018-11931 PUBLISHED CVSS 7.199999809265137 HIGH

Improper access to HLOS is possible while transferring memory to CPZ in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in versions MDM9150, MDM9206, MDM9607, MDM9650, MSM8996AU, QCS605, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130.

EPSS 0.04% · 11.2th percentile

Risk Scores

CVSS v2.0
7.199999809265137
EPSS Score
0.04%
11.2th percentile

Affected Products

VendorProductVersions
qualcommsd_625_firmware
qualcommsd_425_firmware
qualcommsd_632_firmware
qualcommsd_412_firmware
qualcommsd_205_firmware
qualcommsda660_firmware
Qualcomm, Inc.Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & MusicMDM9150, MDM9206, MDM9607, MDM9650, MSM8996AU, QCS605, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130
qualcommsdm660_firmware
qualcommsd_820_firmware
qualcommsd_616_firmware
qualcommsdm630_firmware
qualcommmdm9150_firmware
qualcommsd_439_firmware
qualcommsd_210_firmware
qualcommsd_8cx_firmware
qualcommsd_430_firmware
qualcommsd_212_firmware
qualcommmsm8996au_firmware
qualcommsd_450_firmware
qualcommsd_652_firmware

…and 21 more

Timeline

References

Open in Interactive Console →