7.8

CVE-2018-13910

EPSS 0.21%
Veröffentlicht 14.06.2019 17:29:00
Zuletzt bearbeitet 21.11.2024 03:48:19
Erkennungen
Login

Out-of-Bounds access in TZ due to invalid index calculated to check against DDR in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ8074, MDM9206, MDM9607, MDM9650, MDM9655, MSM8996AU, QCA8081, Qualcomm 215, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 650/52, SD 820, SD 820A, SDM439, Snapdragon_High_Med_2016

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

NVD 25 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Qualcomm ≫ Ipq8074 Firmware Version -

Qualcomm ≫ Ipq8074 Version -

Qualcomm ≫ Mdm9206 Firmware Version -

Qualcomm ≫ Mdm9206 Version -

Qualcomm ≫ Mdm9607 Firmware Version -

Qualcomm ≫ Mdm9607 Version -

Qualcomm ≫ Mdm9650 Firmware Version -

Qualcomm ≫ Mdm9650 Version -

Qualcomm ≫ Mdm9655 Firmware Version -

Qualcomm ≫ Mdm9655 Version -

Qualcomm ≫ Msm8996au Firmware Version -

Qualcomm ≫ Msm8996au Version -

Qualcomm ≫ Qca8081 Firmware Version -

Qualcomm ≫ Qca8081 Version -

Qualcomm ≫ Qm215 Firmware Version -

Qualcomm ≫ Qm215 Version -

Qualcomm ≫ Sd 410 Firmware Version -

Qualcomm ≫ Sd 410 Version -

Qualcomm ≫ Sd 412 Firmware Version -

Qualcomm ≫ Sd 412 Version -

Qualcomm ≫ Sd 425 Firmware Version -

Qualcomm ≫ Sd 425 Version -

Qualcomm ≫ Sd 427 Firmware Version -

Qualcomm ≫ Sd 427 Version -

Qualcomm ≫ Sd 430 Firmware Version -

Qualcomm ≫ Sd 430 Version -

Qualcomm ≫ Sd 435 Firmware Version -

Qualcomm ≫ Sd 435 Version -

Qualcomm ≫ Sd 439 Firmware Version -

Qualcomm ≫ Sd 439 Version -

Qualcomm ≫ Sd 429 Firmware Version -

Qualcomm ≫ Sd 429 Version -

Qualcomm ≫ Sd 450 Firmware Version -

Qualcomm ≫ Sd 450 Version -

Qualcomm ≫ Sd 625 Firmware Version -

Qualcomm ≫ Sd 625 Version -

Qualcomm ≫ Sd 632 Firmware Version -

Qualcomm ≫ Sd 632 Version -

Qualcomm ≫ Sd 650 Firmware Version -

Qualcomm ≫ Sd 650 Version -

Qualcomm ≫ Sd 652 Firmware Version -

Qualcomm ≫ Sd 652 Version -

Qualcomm ≫ Sd 820 Firmware Version -

Qualcomm ≫ Sd 820 Version -

Qualcomm ≫ Sd 820a Firmware Version -

Qualcomm ≫ Sd 820a Version -

Qualcomm ≫ Sdm439 Firmware Version -

Qualcomm ≫ Sdm439 Version -

Qualcomm ≫ Snapdragon High Med 2016 Firmware Version -

Qualcomm ≫ Snapdragon High Med 2016 Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.21%	0.109

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.8	1.8	5.9	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C

CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

https://www.qualcomm.com/company/product-security/bulletins

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2018-13910

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2018-13910

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2018-13910

EUVD