1. Home
  2. CVE Database
  3. CVE-2018-5839
HIGH · 7.1

CVE-2018-5839

Improperly configured memory protection allows read/write access to modem image from HLOS kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon ...

Vulnerability Description

Improperly configured memory protection allows read/write access to modem image from HLOS kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in versions MDM9150, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8996AU, QCS605, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM630, SDM660, SDX20, SXR1130.

CVSS Score

7.1

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
NONE

Affected Products

VendorProductVersions
QualcommSnapdragon Auto Firmware-
QualcommSnapdragon Auto-
QualcommSnapdragon Compute Firmware-
QualcommSnapdragon Compute-
QualcommSnapdragon Consumer Internet Of Things Firmware-
QualcommSnapdragon Consumer Internet Of Things-
QualcommSnapdragon Industrial Internet Of Things Firmware-
QualcommSnapdragon Industrial Internet Of Things-
QualcommMdm9150 Firmware-
QualcommMdm9150-
QualcommMdm9615 Firmware-
QualcommMdm9615-
QualcommMdm9625 Firmware-
QualcommMdm9625-
QualcommMdm9635M Firmware-
QualcommMdm9635M-
QualcommMdm9640 Firmware-
QualcommMdm9640-
QualcommMdm9650 Firmware-
QualcommMdm9650-

Related Weaknesses (CWE)

CWE-269

References

FAQ

What is CVE-2018-5839?

CVE-2018-5839 is a vulnerability with a CVSS score of 7.1 (HIGH). Improperly configured memory protection allows read/write access to modem image from HLOS kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon ...

How severe is CVE-2018-5839?

CVE-2018-5839 has been rated HIGH with a CVSS base score of 7.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2018-5839?

Check the references section above for vendor advisories and patch information. Affected products include: Qualcomm Snapdragon Auto Firmware, Qualcomm Snapdragon Auto, Qualcomm Snapdragon Compute Firmware, Qualcomm Snapdragon Compute, Qualcomm Snapdragon Consumer Internet Of Things Firmware.