CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
Confidence
High
EPSS
Percentile
43.1%
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 410/12, SD 615/16/SD 415, SD 808, and SD 810, improper input validation while processing SCM Command can lead to unauthorized memory access.
Vendor | Product | Version | CPE |
---|---|---|---|
qualcomm | sd_410_firmware | - | cpe:2.3:o:qualcomm:sd_410_firmware:-:*:*:*:*:*:*:* |
qualcomm | sd_410 | - | cpe:2.3:h:qualcomm:sd_410:-:*:*:*:*:*:*:* |
qualcomm | sd_412_firmware | - | cpe:2.3:o:qualcomm:sd_412_firmware:-:*:*:*:*:*:*:* |
qualcomm | sd_412 | - | cpe:2.3:h:qualcomm:sd_412:-:*:*:*:*:*:*:* |
qualcomm | sd_615_firmware | - | cpe:2.3:o:qualcomm:sd_615_firmware:-:*:*:*:*:*:*:* |
qualcomm | sd_615 | - | cpe:2.3:h:qualcomm:sd_615:-:*:*:*:*:*:*:* |
qualcomm | sd_616_firmware | - | cpe:2.3:o:qualcomm:sd_616_firmware:-:*:*:*:*:*:*:* |
qualcomm | sd_616 | - | cpe:2.3:h:qualcomm:sd_616:-:*:*:*:*:*:*:* |
qualcomm | sd_415_firmware | - | cpe:2.3:o:qualcomm:sd_415_firmware:-:*:*:*:*:*:*:* |
qualcomm | sd_415 | - | cpe:2.3:h:qualcomm:sd_415:-:*:*:*:*:*:*:* |
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
Confidence
High
EPSS
Percentile
43.1%