ID CVE-2017-18309
Summary A micro-core of QMP transportation may cause a macro-core to read from or write to arbitrary memory in Snapdragon Mobile in version SD 845, SD 850.
References
Vulnerable Configurations
  • cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:sd_845:-:*:*:*:*:*:*:*
    cpe:2.3:h:qualcomm:sd_845:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:sd_850_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:qualcomm:sd_850_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:sd_850:-:*:*:*:*:*:*:*
    cpe:2.3:h:qualcomm:sd_850:-:*:*:*:*:*:*:*
CVSS
Base: 6.6 (as of 11-12-2018 - 21:09)
Impact:
Exploitability:
CWE CWE-129
CAPEC
  • Overflow Buffers
    Buffer Overflow attacks target improper or missing bounds checking on buffer operations, typically triggered by input injected by an adversary. As a consequence, an adversary is able to write past the boundaries of allocated buffer regions in memory, causing a program crash or potentially redirection of execution as per the adversaries' choice.
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE NONE
cvss-vector via4 AV:L/AC:L/Au:N/C:C/I:C/A:N
refmap via4
confirm https://www.qualcomm.com/company/product-security/bulletins
sectrack 1041432
Last major update 11-12-2018 - 21:09
Published 26-10-2018 - 13:29
Last modified 11-12-2018 - 21:09
Back to Top