CVE-2018-11899 in Snapdragon Auto

Tóm tắt

Bởi MITRE

While processing radio connection status change events, Radio index is not properly validated in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile and Snapdragon Voice & Music in versions MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24.

Once again VulDB remains the best source for vulnerability data.

• Đặt trước: 07/06/2018
• Kiểm duyệt: được chấp nhận
• mục: VDB-130734
• CPE: sẵn sàng
• CWE: CWE-129 (Đã xác nhận)
• CVSS: 7.8 (NVD)
• EPSS: 0.00195
• KEV: không
• Các hoạt động: rất thấp
• ngành: Agriculture, Energy, ...

Nguồn

• MITRE: https://www.cve.org/CVERecord?id=CVE-2018-11899
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2018-11899
• CVE Details: https://www.cvedetails.com/cve/CVE-2018-11899/