Aller au contenu
en Se connecter
Non notée

CVE-2018-11845 Usage of non-time-constant comparison functions can lead to information leakage through side channel analysis in…

Description

Usage of non-time-constant comparison functions can lead to information leakage through side channel analysis in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in versions MDM9150, MDM9206, MDM9607, MDM9650, MDM9655, MSM8996AU, QCS605, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130.

Produits et versions touchés

Produit Versions touchées Corrigé en
Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music Versions non publiées

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

Les 11 CVE de Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music →
CVE-2022-25690 Information disclosure in WLAN due to improper validation of array index while parsing crafted ANQP action frames in… 7.5 Élevée CVE-2021-35084 Possible out of bound read due to lack of length check of data length for a DIAG event in Snapdragon Auto, Snapdragon… 5.5 Moyenne CVE-2021-30319 Possible integer overflow due to improper validation of command length parameters while processing WMI command in… 7.8 Élevée CVE-2021-30348 Improper validation of LLM utility timers availability can lead to denial of service in Snapdragon Auto, Snapdragon… 6.5 Moyenne
Suivre cette CVE