Improperly configured memory protection allows read/write access to modem image from HLOS kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in versions MDM9150, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8996AU, QCS605, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM630, SDM660, SDX20, SXR1130.
Date Added | Due Date | Vulnerability Name | Required Action |
---|---|---|---|
N/A |
Type | Version | Base score | Base severity | Vector |
---|---|---|---|---|
Primary | 3.0 | 7.1 | HIGH | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N |
Primary | 2.0 | 6.6 | MEDIUM | AV:L/AC:L/Au:N/C:C/I:C/A:N |
CWE ID | Type | Source |
---|---|---|
CWE-269 | Primary | nvd@nist.gov |
Hyperlink | Source | Resource |
---|---|---|
http://www.securityfocus.com/bid/106845 | product-security@qualcomm.com | Third Party Advisory VDB Entry |
https://www.qualcomm.com/company/product-security/bulletins | product-security@qualcomm.com | Vendor Advisory |