CVE-2018-13909 in Snapdragon Auto
摘要
由 VulDB • 2026-07-30
Metadata verification and partial hash system calls by bootloader may corrupt parallel hashing state in progress resulting in unexpected behavior in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9206, MDM9607, MDM9650, MDM9655, QCS605, Qualcomm 215, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 712 / SD 710 / SD 670, SD 845 / SD 850, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130
引导加载程序（bootloader）中的元数据验证和部分哈希系统调用可能会破坏正在进行的并行哈希状态，从而导致 Snapdragon Auto、Snapdragon Compute、Snapdragon Consumer Electronics Connectivity、Snapdragon Consumer IOT、Snapdragon Industrial IOT、Snapdragon Mobile、Snapdragon Voice & Music 在 MDM9206、MDM9607、MDM9650、MDM9655、QCS605、Qualcomm 215、SD 410/12、SD 425、SD 427、SD 430、SD 435、SD 439 / SD 429、SD 450、SD 625、SD 632、SD 636、SD 712 / SD 710 / SD 670、SD 845 / SD 850、SD 8CX、SDA660、SDM439、SDM630、SDM660、Snapdragon_High_Med_2016、SXR1130 中出现意外行为。
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.