Podatność CVE-2017-18124

Podatność CVE-2017-18124

Publikacja: 2018-10-26

Opis:

During secure boot, addition is performed on uint8 ptrs which led to overflow issue in Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version FSM9055, IPQ4019, MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDX20

Typ:

CWE-119

(Improper Restriction of Operations within the Bounds of a Memory Buffer)

CVSS2 => (AV:L/AC:L/Au:N/C:C/I:C/A:C)

Ogólna skala CVSS	Znaczenie	Łatwość wykorzystania
7.2/10	10/10	3.9/10

Wymagany dostęp	Złożoność ataku	Autoryzacja
Lokalny	Niska	Nie wymagana
Wpływ na poufność	Wpływ na integralność	Wpływ na dostępność
Pełny	Pełny	Pełny

Affected software
Qualcomm -> Sd 410 firmware
Qualcomm -> Sd 835 firmware
Qualcomm -> Fsm9055 firmware
Qualcomm -> Sd 412 firmware
Qualcomm -> Sd 845 firmware
Qualcomm -> Ipq4019 firmware
Qualcomm -> Sd 415 firmware
Qualcomm -> Sd 850 firmware
Qualcomm -> Mdm9206 firmware
Qualcomm -> Sd 425 firmware
Qualcomm -> Sda660 firmware
Qualcomm -> Mdm9607 firmware
Qualcomm -> Sd 430 firmware
Qualcomm -> Sdx20 firmware
Qualcomm -> Mdm9625 firmware
Qualcomm -> Sd 450 firmware
Qualcomm -> Mdm9635m firmware
Qualcomm -> Sd 615 firmware
Qualcomm -> Mdm9640 firmware
Qualcomm -> Sd 616 firmware
Qualcomm -> Mdm9645 firmware
Qualcomm -> Sd 617 firmware
Qualcomm -> Mdm9650 firmware
Qualcomm -> Sd 625 firmware
Qualcomm -> Mdm9655 firmware
Qualcomm -> Sd 650 firmware
Qualcomm -> Msm8909w firmware
Qualcomm -> Sd 652 firmware
Qualcomm -> Msm8996au firmware
Qualcomm -> Sd 800 firmware
Qualcomm -> Sd 205 firmware
Qualcomm -> Sd 810 firmware
Qualcomm -> Sd 210 firmware
Qualcomm -> Sd 820 firmware
Qualcomm -> Sd 212 firmware
Qualcomm -> Sd 820a firmware

Referencje:

https://www.qualcomm.com/company/product-security/bulletins

Copyright 2024, cxsecurity.com