CVE-2018-11847

N/A

Beschreibung

Malicious TA can tag QSEE kernel memory and map to EL0, there by corrupting the physical memory as well it can be used to corrupt the QSEE kernel and compromise the whole TEE in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables and Snapdragon Wired Infrastructure and Networking in versions IPQ8074, MDM9206, MDM9607, MDM9650, MDM9655, MSM8909W, MSM8996AU, QCA8081, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 650/52, SD 820, SD 820A, SD 835, SD 8CX, SDM439 and Snapdragon_High_Med_2016

CVE Details

CVSS v3.1 BewertungN/A

Veroffentlicht2/11/2019

Zuletzt geandert11/21/2024

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

qualcomm:ipq8074qualcomm:ipq8074_firmwarequalcomm:mdm9206qualcomm:mdm9206_firmwarequalcomm:mdm9607qualcomm:mdm9607_firmwarequalcomm:mdm9650qualcomm:mdm9650_firmwarequalcomm:mdm9655qualcomm:mdm9655_firmwarequalcomm:msm8909wqualcomm:msm8909w_firmwarequalcomm:msm8996auqualcomm:msm8996au_firmwarequalcomm:qca8081qualcomm:qca8081_firmwarequalcomm:sd_205qualcomm:sd_205_firmwarequalcomm:sd_210qualcomm:sd_210_firmwarequalcomm:sd_212qualcomm:sd_212_firmwarequalcomm:sd_410qualcomm:sd_410_firmwarequalcomm:sd_412qualcomm:sd_412_firmwarequalcomm:sd_415qualcomm:sd_415_firmwarequalcomm:sd_425qualcomm:sd_425_firmwarequalcomm:sd_427qualcomm:sd_427_firmwarequalcomm:sd_429qualcomm:sd_429_firmwarequalcomm:sd_430qualcomm:sd_430_firmwarequalcomm:sd_435qualcomm:sd_435_firmwarequalcomm:sd_439qualcomm:sd_439_firmwarequalcomm:sd_450qualcomm:sd_450_firmwarequalcomm:sd_615qualcomm:sd_615_firmwarequalcomm:sd_616qualcomm:sd_616_firmwarequalcomm:sd_625qualcomm:sd_625_firmwarequalcomm:sd_632qualcomm:sd_632_firmwarequalcomm:sd_650qualcomm:sd_650_firmwarequalcomm:sd_652qualcomm:sd_652_firmwarequalcomm:sd_820qualcomm:sd_820_firmwarequalcomm:sd_820aqualcomm:sd_820a_firmwarequalcomm:sd_835qualcomm:sd_835_firmwarequalcomm:sd_8cxqualcomm:sd_8cx_firmwarequalcomm:sdm439qualcomm:sdm439_firmwarequalcomm:snapdragon_high_med_2016qualcomm:snapdragon_high_med_2016_firmware

Schwachen (CWE)

CWE-20

Referenzen

http://www.securityfocus.com/bid/106475(product-security@qualcomm.com)

https://www.qualcomm.com/company/product-security/bulletins(product-security@qualcomm.com)

http://www.securityfocus.com/bid/106475(af854a3a-2127-422b-91ae-364da2661108)

https://www.qualcomm.com/company/product-security/bulletins(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.