CVE-2018-5869

HIGH

Qualcomm Snapdragon Mobile and Snapdragon Wear - Memory Corruption in QTEE Keymaster

Title source: llm
STIX 2.1

Description

Improper input validation in the QTEE keymaster app can lead to invalid memory access in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 615/16/SD 415, SD 800, SD 810

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/106128

Scores

CVSS v3 7.8
EPSS 0.0004
EPSS Percentile 11.5%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-20
Status published
Products (13)
qualcomm/mdm9206_firmware
qualcomm/mdm9607_firmware
qualcomm/msm8909w_firmware
qualcomm/sd_205_firmware
qualcomm/sd_210_firmware
qualcomm/sd_212_firmware
qualcomm/sd_410_firmware
qualcomm/sd_412_firmware
qualcomm/sd_415_firmware
qualcomm/sd_615_firmware
... and 3 more
Published Jan 18, 2019
Tracked Since Feb 18, 2026