Not rated
CVE-2018-11259 Due to Improper Access Control of NAND-based EFS in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, From…
Description
Due to Improper Access Control of NAND-based EFS in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, From fastboot on a NAND-based device, the EFS partition can be erased. Apps processor then has non-secure world full read/write access to the partition until the modem boots and configures the EFS partition addresses in its MPU partition.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear | Versions not published |
Other CVEs of Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
The 123 CVEs of Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear →
CVE-2018-5915
Exception in Modem IP stack while processing IPv6 packet in snapdragon automobile, snapdragon mobile and snapdragon wear…
Not rated
CVE-2017-18332
Security keys are logged when any WCDMA call is configured or reconfigured in snapdragon automobile, snapdragon mobile…
Not rated
CVE-2017-18331
Improper access control on secure display buffers in snapdragon automobile, snapdragon mobile and snapdragon wear in…
Not rated
CVE-2018-11999
Improper input validation in trustzone can lead to denial of service in snapdragon automobile, snapdragon mobile and…
Not rated