ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2018-13912

—
CVSS 3.0
5.5 medium
EPSS
<1%p10
Published
()
Modified
Description

Arbitrary write issue can occur when user provides kernel address in compat mode in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS605, SD 210/SD 212/SD 205, SD 425, SD 439 / SD 429, SD 625, SD 636, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24.

Vendors
qualcomm
Products
snapdragon auto firmware, snapdragon connectivity firmware, snapdragon consumer internet of things firmware, snapdragon industrial internet of things firmware, snapdragon mobile firmware, snapdragon voice \& music firmware, mdm9150 firmware, mdm9206 firmware, mdm9607 firmware, mdm9640 firmware, mdm9650 firmware, msm8909w firmware
Weakness
CWE-119
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news

No ingested article mentions this CVE yet.