CVE-2018-11259

🗓️ 06 Jul 2018 17:00:00Reported by qualcommType

Due to Improper Access Control of NAND-based EFS in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, the EFS partition can be erased. Apps processor then has non-secure world full read/write access to the partition

Reporter	Title	Published	Views	Family All 5
android	CVE-2018-11259	1 Jul 201800:00	–	android
Cvelist	CVE-2018-11259	6 Jul 201817:00	–	cvelist
EUVD	EUVD-2018-3299	7 Oct 202500:30	–	euvd
NVD	CVE-2018-11259	6 Jul 201817:29	–	nvd
Prion	Improper access control	6 Jul 201817:29	–	prion

NVD

Node

qualcomm mdm9206_firmwareMatch-

AND

qualcomm mdm9206Match-

Node

qualcomm mdm9607_firmwareMatch-

AND

qualcomm mdm9607Match-

Node

qualcomm mdm9635m_firmwareMatch-

AND

qualcomm mdm9635mMatch-

Node

qualcomm mdm9640_firmwareMatch-

AND

qualcomm mdm9640Match-

Node

qualcomm mdm9650_firmwareMatch-

AND

qualcomm mdm9650Match-

Node

qualcomm mdm9655_firmwareMatch-

AND

qualcomm mdm9655Match-

Node

qualcomm msm8909w_firmwareMatch-

AND

qualcomm msm8909wMatch-

Node

qualcomm msm8996au_firmwareMatch-

AND

qualcomm msm8996auMatch-

Node

qualcomm sd_210_firmwareMatch-

AND

qualcomm sd_210Match-

Node

qualcomm sd_212_firmwareMatch-

AND

qualcomm sd_212Match-

Node

qualcomm sd_205_firmwareMatch-

AND

qualcomm sd_205Match-

Node

qualcomm sd_410_firmwareMatch-

AND

qualcomm sd_410Match-

Node

qualcomm sd_412_firmwareMatch-

AND

qualcomm sd_412Match-

Node

qualcomm sd_425_firmwareMatch-

AND

qualcomm sd_425Match-

Node

qualcomm sd_427_firmwareMatch-

AND

qualcomm sd_427Match-

Node

qualcomm sd_430_firmwareMatch-

AND

qualcomm sd_430Match-

Node

qualcomm sd_435_firmwareMatch-

AND

qualcomm sd_435Match-

Node

qualcomm sd_450_firmwareMatch-

AND

qualcomm sd_450Match-

Node

qualcomm sd_615_firmwareMatch-

AND

qualcomm sd_615Match-

Node

qualcomm sd_616_firmwareMatch-

AND

qualcomm sd_616Match-

Node

qualcomm sd_415_firmwareMatch-

AND

qualcomm sd_415Match-

Node

qualcomm sd_617_firmwareMatch-

AND

qualcomm sd_617Match-

Node

qualcomm sd_625_firmwareMatch-

AND

qualcomm sd_625Match-

Node

qualcomm sd_650_firmwareMatch-

AND

qualcomm sd_650Match-

Node

qualcomm sd_652_firmwareMatch-

AND

qualcomm sd_652Match-

Node

qualcomm sd_800_firmwareMatch-

AND

qualcomm sd_800Match-

Node

qualcomm sd_810_firmwareMatch-

AND

qualcomm sd_810Match-

Node

qualcomm sd_820_firmwareMatch-

AND

qualcomm sd_820Match-

Node

qualcomm sd_820a_firmwareMatch-

AND

qualcomm sd_820aMatch-

Node

qualcomm sd_835_firmwareMatch-

AND

qualcomm sd_835Match-

Node

qualcomm sd_845_firmwareMatch-

AND

qualcomm sd_845Match-

Node

qualcomm sd_850_firmwareMatch-

AND

qualcomm sd_850Match-

Node

qualcomm sdm630_firmwareMatch-

AND

qualcomm sdm630Match-

Node

qualcomm sdm632_firmwareMatch-

AND

qualcomm sdm632Match-

Node

qualcomm sdm636_firmwareMatch-

AND

qualcomm sdm636Match-

Node

qualcomm sdm660_firmwareMatch-

AND

qualcomm sdm660Match-

Node

qualcomm sdx20_firmwareMatch-

AND

qualcomm sdx20Match-

Node

qualcomm snapdragon_high_med_2016_firmwareMatch-

AND

qualcomm snapdragon_high_med_2016Match-

[
  {
    "product": "Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDM630, SDM632, SDM636, SDM660, SDX20, Snapdragon_High_Med_2016"
      }
    ]
  }
]

Source	Link
qualcomm	www.qualcomm.com/company/product-security/bulletins

21 Nov 2024 03:43Current

7.2High risk

Vulners AI Score7.2

CVSS 23.6

CVSS 37.7

EPSS0.0009

CWE-732