CVE-2018-13904

🗓️ 25 Feb 2019 23:00:00Reported by qualcommType

CVE-2018-13904: Improper input validation in SCM handler for unauthorized storage access in various Snapdragon platform

Reporter	Title	Published	Views	Family All 4
Cvelist	CVE-2018-13904	25 Feb 201923:00	–	cvelist
EUVD	EUVD-2018-5838	7 Oct 202500:30	–	euvd
NVD	CVE-2018-13904	25 Feb 201922:29	–	nvd
Prion	Input validation	25 Feb 201922:29	–	prion

NVD

Node

qualcomm mdm9206_firmwareMatch-

AND

qualcomm mdm9206Match-

Node

qualcomm mdm9607_firmwareMatch-

AND

qualcomm mdm9607Match-

Node

qualcomm mdm9650_firmwareMatch-

AND

qualcomm mdm9650Match-

Node

qualcomm mdm9655_firmwareMatch-

AND

qualcomm mdm9655Match-

Node

qualcomm qcs605_firmwareMatch-

AND

qualcomm qcs605Match-

Node

qualcomm sd_410_firmwareMatch-

AND

qualcomm sd_410Match-

Node

qualcomm sd_12_firmwareMatch-

AND

qualcomm sd_12Match-

Node

qualcomm sd_675_firmwareMatch-

AND

qualcomm sd_675Match-

Node

qualcomm sd_712_firmwareMatch-

AND

qualcomm sd_712Match-

Node

qualcomm sd_710_firmwareMatch-

AND

qualcomm sd_710Match-

Node

qualcomm sd_670_firmwareMatch-

AND

qualcomm sd_670Match-

Node

qualcomm sd_8cx_firmwareMatch-

AND

qualcomm sd_8cxMatch-

Node

qualcomm sxr1130_firmwareMatch-

AND

qualcomm sxr1130Match-

[
  {
    "product": "Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "MDM9206, MDM9607, MDM9650, MDM9655, QCS605, SD 410/12, SD 675, SD 712 / SD 710 / SD 670, SD 8CX, SXR1130"
      }
    ]
  }
]

Source	Link
securityfocus	www.securityfocus.com/bid/106845
qualcomm	www.qualcomm.com/company/product-security/bulletins

21 Nov 2024 03:48Current

9.2High risk

Vulners AI Score9.2

CVSS 27.5

CVSS 39.8

EPSS0.00391

CWE-20