Not rated

CVE-2018-13904 Improper input validation in SCM handler to access storage in TZ can lead to unauthorized access in Snapdragon Auto,…

Description

Improper input validation in SCM handler to access storage in TZ can lead to unauthorized access in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in versions MDM9206, MDM9607, MDM9650, MDM9655, QCS605, SD 410/12, SD 675, SD 712 / SD 710 / SD 670, SD 8CX, SXR1130.

Affected products and versions

Product	Affected versions	Fixed in
Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile	Versions not published

References

www.qualcomm.com www.qualcomm.com
106845 www.securityfocus.com

Timeline

Published February 25, 2019
Last modified August 5, 2024

The 8 CVEs of Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile →

CVE-2020-3615 Valid deauth/disassoc frames is dropped in case if RMF is enabled and some rouge peer keep on sending rogue… Not rated CVE-2019-10623 Possible integer overflow can happen in host driver while processing user controlled string due to improper validation… Not rated CVE-2019-14086 Possible integer overflow while checking the length of frame which is a 32 bit integer and is added to another 32 bit… Not rated CVE-2019-14085 Possible Integer underflow in WLAN function due to lack of check of data received from user side in Snapdragon Auto,… Not rated

Track this CVE