CVE-2018-5839 in Snapdragon Auto

Résumé

par MITRE

Improperly configured memory protection allows read/write access to modem image from HLOS kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in versions MDM9150, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8996AU, QCS605, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM630, SDM660, SDX20, SXR1130.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Réserver: 19/01/2018
• Modérer: accepté
• Entrée: VDB-131201
• CPE: prêt
• CWE: CWE-284 (confirmé)
• CVSS: 7.1 (NVD)
• EPSS: 0.00208
• KEV: non
• Activités: très faible
• Secteur: Agriculture, Hospital, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2018-5839
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2018-5839
• CVE Details: https://www.cvedetails.com/cve/CVE-2018-5839/