In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, and SD 850, in multiple Secure DEMUX functions (e.g., SDMX_open_session, SDMX_close_session, SDMX_set_session_cfg), when parameter validation fails, an error code is written into a response buffer, without checking that response buffer length (rsplen) passed from HLOS is large enough to hold the response. If the buffer is at the end of a non-secure page followed by secured memory page, this can cause a secure memory corruption.
AI analysis not yet available
Plain-English explanation, risk summary, and remediation steps will appear here once AI analysis is complete.
No Fix Known
No patch has been released yet. Apply workarounds or mitigations where available.
| Vendor | Product | Versions | Fixed In |
|---|---|---|---|
| qualcomm | mdm9206_firmware | - | - |
| qualcomm | mdm9650_firmware | - |
Published
CVE disclosed publicly
Last Modified
Most recent update
Indexed to CVEInsight
Added to this platform
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
26
Affected Products
4
References
qualcomm / mdm9206_firmware
| - |
| qualcomm | sd_210_firmware | - | - |
| qualcomm | sd_212_firmware | - | - |
| qualcomm | sd_205_firmware | - | - |
| qualcomm | sd_410_firmware | - | - |
| qualcomm | sd_412_firmware | - | - |
| qualcomm | sd_425_firmware | - | - |
| qualcomm | sd_430_firmware | - | - |
| qualcomm | sd_450_firmware | - | - |
| qualcomm | sd_615_firmware | - | - |
| qualcomm | sd_616_firmware | - | - |
| qualcomm | sd_415_firmware | - | - |
| qualcomm | sd_617_firmware | - | - |
| qualcomm | sd_625_firmware | - | - |
| qualcomm | sd_650_firmware | - | - |
| qualcomm | sd_652_firmware | - | - |
| qualcomm | sd_800_firmware | - | - |
| qualcomm | sd_808_firmware | - | - |
| qualcomm | sd_810_firmware | - | - |
| qualcomm | sd_820_firmware | - | - |
| qualcomm | sd_835_firmware | - | - |
| qualcomm | sd_845_firmware | - | - |
| qualcomm | sd_600_firmware | - | - |
| qualcomm | sd_850_firmware | - | - |
| qualcomm | sd_820a_firmware | - | - |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability
Impact