Lucene search

[email protected]CVE-2018-13913

HistoryFeb 25, 2019 - 10:29 p.m.

CVE-2018-13913

2019-02-2522:29:00

CWE-129

[email protected]

web.nvd.nist.gov

cve-2018-13913

array index validation

unauthorized access

snapdragon

security vulnerability

nvd

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

9.3 High

AI Score

Confidence

High

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

11.8%

JSON

Improper validation of array index can lead to unauthorized access while processing debugFS in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in version MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS605, SD 210/SD 212/SD 205, SD 425, SD 439 / SD 429, SD 615/16/SD 415, SD 625, SD 636, SD 650/52, SD 712 / SD 710 / SD 670, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24.

CPENameOperatorVersion
qualcomm:snapdragon_auto_firmwarequalcomm snapdragon auto firmwareeq-
qualcomm:snapdragon_consumer_internet_of_things_firmwarequalcomm snapdragon consumer internet of things firmwareeq-
qualcomm:snapdragon_industrial_internet_of_things_firmwarequalcomm snapdragon industrial internet of things firmwareeq-
qualcomm:snapdragon_internet_of_things_firmwarequalcomm snapdragon internet of things firmwareeq-
qualcomm:snapdragon_mobile_firmwarequalcomm snapdragon mobile firmwareeq-
qualcomm:snapdragon_voice_\&_music_firmwarequalcomm snapdragon voice \& music firmwareeq-
qualcomm:mdm9150_firmwarequalcomm mdm9150 firmwareeq-
qualcomm:mdm9206_firmwarequalcomm mdm9206 firmwareeq-
qualcomm:mdm9607_firmwarequalcomm mdm9607 firmwareeq-
qualcomm:mdm9640_firmwarequalcomm mdm9640 firmwareeq-

CPE	Name	Operator	Version
qualcomm:snapdragon_auto_firmware	qualcomm snapdragon auto firmware	eq	-
qualcomm:snapdragon_consumer_internet_of_things_firmware	qualcomm snapdragon consumer internet of things firmware	eq	-
qualcomm:snapdragon_industrial_internet_of_things_firmware	qualcomm snapdragon industrial internet of things firmware	eq	-
qualcomm:snapdragon_internet_of_things_firmware	qualcomm snapdragon internet of things firmware	eq	-
qualcomm:snapdragon_mobile_firmware	qualcomm snapdragon mobile firmware	eq	-
qualcomm:snapdragon_voice_\&_music_firmware	qualcomm snapdragon voice \& music firmware	eq	-
qualcomm:mdm9150_firmware	qualcomm mdm9150 firmware	eq	-
qualcomm:mdm9206_firmware	qualcomm mdm9206 firmware	eq	-
qualcomm:mdm9607_firmware	qualcomm mdm9607 firmware	eq	-
qualcomm:mdm9640_firmware	qualcomm mdm9640 firmware	eq	-

Rows per page:

1-10 of 411

References

www.codeaurora.org/security-bulletin/2019/02/04/february-2019-code-aurora-security-bulletin

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

9.3 High

AI Score

Confidence

High

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

11.8%

JSON

Related for CVE-2018-13913

prion1 androidsecurity1