// For flags

CVE-2018-13909

 

Severity Score

7.0
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Metadata verification and partial hash system calls by bootloader may corrupt parallel hashing state in progress resulting in unexpected behavior in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9206, MDM9607, MDM9650, MDM9655, QCS605, Qualcomm 215, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 712 / SD 710 / SD 670, SD 845 / SD 850, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130

La comprobaciĆ³n de metadatos y llamadas parciales al sistema hash por el cargador de arranque pueden daƱar el estado del hashing paralelo en curso, resultando en un comportamiento inesperado en Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music en las versiones MDM9206, MDM9607, MDM9650, MDM9655, QCS605, Qualcomm 215, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 712 / SD 710 / SD 670, SD 845 / SD 850, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130.

*Credits: N/A
CVSS Scores
Attack Vector
Local
Attack Complexity
High
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Local
Attack Complexity
Medium
Authentication
None
Confidentiality
Complete
Integrity
Complete
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2018-07-11 CVE Reserved
  • 2019-06-14 CVE Published
  • 2023-03-08 EPSS Updated
  • 2024-08-05 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CAPEC
References (1)
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Qualcomm
Search vendor "Qualcomm"
Mdm9206 Firmware
Search vendor "Qualcomm" for product "Mdm9206 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Mdm9206
Search vendor "Qualcomm" for product "Mdm9206"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Mdm9607 Firmware
Search vendor "Qualcomm" for product "Mdm9607 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Mdm9607
Search vendor "Qualcomm" for product "Mdm9607"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Mdm9650 Firmware
Search vendor "Qualcomm" for product "Mdm9650 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Mdm9650
Search vendor "Qualcomm" for product "Mdm9650"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Mdm9655 Firmware
Search vendor "Qualcomm" for product "Mdm9655 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Mdm9655
Search vendor "Qualcomm" for product "Mdm9655"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Qcs605 Firmware
Search vendor "Qualcomm" for product "Qcs605 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Qcs605
Search vendor "Qualcomm" for product "Qcs605"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Qm215 Firmware
Search vendor "Qualcomm" for product "Qm215 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Qm215
Search vendor "Qualcomm" for product "Qm215"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 410 Firmware
Search vendor "Qualcomm" for product "Sd 410 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 410
Search vendor "Qualcomm" for product "Sd 410"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 412 Firmware
Search vendor "Qualcomm" for product "Sd 412 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 412
Search vendor "Qualcomm" for product "Sd 412"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 425 Firmware
Search vendor "Qualcomm" for product "Sd 425 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 425
Search vendor "Qualcomm" for product "Sd 425"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 427 Firmware
Search vendor "Qualcomm" for product "Sd 427 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 427
Search vendor "Qualcomm" for product "Sd 427"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 430 Firmware
Search vendor "Qualcomm" for product "Sd 430 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 430
Search vendor "Qualcomm" for product "Sd 430"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 435 Firmware
Search vendor "Qualcomm" for product "Sd 435 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 435
Search vendor "Qualcomm" for product "Sd 435"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 439 Firmware
Search vendor "Qualcomm" for product "Sd 439 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 439
Search vendor "Qualcomm" for product "Sd 439"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 429 Firmware
Search vendor "Qualcomm" for product "Sd 429 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 429
Search vendor "Qualcomm" for product "Sd 429"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 450 Firmware
Search vendor "Qualcomm" for product "Sd 450 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 450
Search vendor "Qualcomm" for product "Sd 450"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 625 Firmware
Search vendor "Qualcomm" for product "Sd 625 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 625
Search vendor "Qualcomm" for product "Sd 625"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 632 Firmware
Search vendor "Qualcomm" for product "Sd 632 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 632
Search vendor "Qualcomm" for product "Sd 632"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 636 Firmware
Search vendor "Qualcomm" for product "Sd 636 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 636
Search vendor "Qualcomm" for product "Sd 636"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 712 Firmware
Search vendor "Qualcomm" for product "Sd 712 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 712
Search vendor "Qualcomm" for product "Sd 712"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 710 Firmware
Search vendor "Qualcomm" for product "Sd 710 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 710
Search vendor "Qualcomm" for product "Sd 710"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 670 Firmware
Search vendor "Qualcomm" for product "Sd 670 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 670
Search vendor "Qualcomm" for product "Sd 670"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 845 Firmware
Search vendor "Qualcomm" for product "Sd 845 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 845
Search vendor "Qualcomm" for product "Sd 845"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 850 Firmware
Search vendor "Qualcomm" for product "Sd 850 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 850
Search vendor "Qualcomm" for product "Sd 850"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 8cx Firmware
Search vendor "Qualcomm" for product "Sd 8cx Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 8cx
Search vendor "Qualcomm" for product "Sd 8cx"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sda660 Firmware
Search vendor "Qualcomm" for product "Sda660 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sda660
Search vendor "Qualcomm" for product "Sda660"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sdm439 Firmware
Search vendor "Qualcomm" for product "Sdm439 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sdm439
Search vendor "Qualcomm" for product "Sdm439"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sdm630 Firmware
Search vendor "Qualcomm" for product "Sdm630 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sdm630
Search vendor "Qualcomm" for product "Sdm630"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sdm660 Firmware
Search vendor "Qualcomm" for product "Sdm660 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sdm660
Search vendor "Qualcomm" for product "Sdm660"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Snapdragon High Med 2016 Firmware
Search vendor "Qualcomm" for product "Snapdragon High Med 2016 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Snapdragon High Med 2016
Search vendor "Qualcomm" for product "Snapdragon High Med 2016"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sxr1130 Firmware
Search vendor "Qualcomm" for product "Sxr1130 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sxr1130
Search vendor "Qualcomm" for product "Sxr1130"
--
Safe