Podatność CVE-2018-13888

Podatność CVE-2018-13888

Publikacja: 2019-02-11

Opis:

There is potential for memory corruption in the RIL daemon due to de reference of memory outside the allocated array length in RIL in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in versions MDM9206, MDM9607, MDM9635M, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDM439, SDM630, SDM660, ZZ_QCS605.

Typ:

CWE-119

(Improper Restriction of Operations within the Bounds of a Memory Buffer)

CVSS2 => (AV:L/AC:L/Au:N/C:C/I:C/A:C)

Ogólna skala CVSS	Znaczenie	Łatwość wykorzystania
7.2/10	10/10	3.9/10

Wymagany dostęp	Złożoność ataku	Autoryzacja
Lokalny	Niska	Nie wymagana
Wpływ na poufność	Wpływ na integralność	Wpływ na dostępność
Pełny	Pełny	Pełny

Affected software
Qualcomm -> Zz qcs605 firmware
Qualcomm -> Sd 625 firmware
Qualcomm -> Mdm9206 firmware
Qualcomm -> Sd 636 firmware
Qualcomm -> Mdm9607 firmware
Qualcomm -> Sd 650 firmware
Qualcomm -> Mdm9635m firmware
Qualcomm -> Sd 652 firmware
Qualcomm -> Mdm9650 firmware
Qualcomm -> Sd 670 firmware
Qualcomm -> Msm8909w firmware
Qualcomm -> Sd 675 firmware
Qualcomm -> Sd 205 firmware
Qualcomm -> Sd 710 firmware
Qualcomm -> Sd 210 firmware
Qualcomm -> Sd 712 firmware
Qualcomm -> Sd 212 firmware
Qualcomm -> Sd 820a firmware
Qualcomm -> Sd 425 firmware
Qualcomm -> Sd 835 firmware
Qualcomm -> Sd 427 firmware
Qualcomm -> Sd 845 firmware
Qualcomm -> Sd 429 firmware
Qualcomm -> Sd 850 firmware
Qualcomm -> Sd 430 firmware
Qualcomm -> Sd 855 firmware
Qualcomm -> Sd 435 firmware
Qualcomm -> Sdm439 firmware
Qualcomm -> Sd 439 firmware
Qualcomm -> Sdm630 firmware
Qualcomm -> Sd 450 firmware
Qualcomm -> Sdm660 firmware

Referencje:

http://www.securityfocus.com/bid/106475

https://www.qualcomm.com/company/product-security/bulletins

Copyright 2024, cxsecurity.com