CVE-2018-11999

MEDIUM

Qualcomm Snapdragon Firmware - Denial of Service via TrustZone Input Validation

Title source: llm
STIX 2.1

Description

Improper input validation in trustzone can lead to denial of service in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9635M, MDM9650, MDM9655, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 636, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDM630, SDM660, SDX24

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/106128

Scores

CVSS v3 5.5
EPSS 0.0005
EPSS Percentile 14.3%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-20
Status published
Products (21)
qualcomm/mdm9206_firmware
qualcomm/mdm9607_firmware
qualcomm/mdm9635m_firmware
qualcomm/mdm9650_firmware
qualcomm/mdm9655_firmware
qualcomm/msm8996au_firmware
qualcomm/sd_205_firmware
qualcomm/sd_210_firmware
qualcomm/sd_212_firmware
qualcomm/sd_410_firmware
... and 11 more
Published Jan 18, 2019
Tracked Since Feb 18, 2026