CRITICAL🇵🇱 Wersja polska

CVE-2018-13906

CVSS 9.1v3.0pub. 2019-06-14upd. 2024-11-21

The HMAC authenticating the message from QSEE is vulnerable to timing side channel analysis leading to potentially forged application message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ8074, MDM9150, MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU, QCA8081, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, SDX20, Snapdragon_High_Med_2016, SXR1130

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

  • Qualcomm Ipq4019

    HW
    Qualcomm
    all versions

  • Qualcomm Ipq4019 Firmware

    OS
    Qualcomm
    all versions

  • Qualcomm Ipq8074

    HW
    Qualcomm
    all versions

  • Qualcomm Ipq8074 Firmware

    OS
    Qualcomm
    all versions

  • Qualcomm Mdm9150

    HW
    Qualcomm
    all versions

  • Qualcomm Mdm9150 Firmware

    OS
    Qualcomm
    all versions

  • Qualcomm Mdm9206

    HW
    Qualcomm
    all versions

  • Qualcomm Mdm9206 Firmware

    OS
    Qualcomm
    all versions

  • Qualcomm Mdm9607

    HW
    Qualcomm
    all versions

  • Qualcomm Mdm9607 Firmware

    OS
    Qualcomm
    all versions

  • Qualcomm Mdm9635m

    HW
    Qualcomm
    all versions

  • Qualcomm Mdm9635m Firmware

    OS
    Qualcomm
    all versions

  • Qualcomm Mdm9640

    HW
    Qualcomm
    all versions

  • Qualcomm Mdm9640 Firmware

    OS
    Qualcomm
    all versions

  • Qualcomm Mdm9650

    HW
    Qualcomm
    all versions

  • Qualcomm Mdm9650 Firmware

    OS
    Qualcomm
    all versions

  • Qualcomm Mdm9655

    HW
    Qualcomm
    all versions

  • Qualcomm Mdm9655 Firmware

    OS
    Qualcomm
    all versions

  • Qualcomm Msm8909w

    HW
    Qualcomm
    all versions

  • Qualcomm Msm8909w Firmware

    OS
    Qualcomm
    all versions

  • Qualcomm Msm8996au

    HW
    Qualcomm
    all versions

  • Qualcomm Msm8996au Firmware

    OS
    Qualcomm
    all versions

  • Qualcomm Qca8081

    HW
    Qualcomm
    all versions

  • Qualcomm Qca8081 Firmware

    OS
    Qualcomm
    all versions

  • Qualcomm Qcs405

    HW
    Qualcomm
    all versions

  • Qualcomm Qcs405 Firmware

    OS
    Qualcomm
    all versions

  • Qualcomm Qcs605

    HW
    Qualcomm
    all versions

  • Qualcomm Qcs605 Firmware

    OS
    Qualcomm
    all versions

  • Qualcomm 215

    HW
    Qualcomm
    all versions

  • Qualcomm 215 Firmware

    OS
    Qualcomm
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2025-27034CRITICAL9.8PL ✓same product

Qualcomm Firmware — memory corruption przy wyborze PLMN z listy SOR

CVE-2025-21483CRITICAL9.8PL ✓same product

Memory corruption w Qualcomm podczas składania pakietów RTP (NALUs)

CVE-2025-21450CRITICAL9.1PL ✓same product

Qualcomm: podatność kryptograficzna umożliwiająca Auth Bypass podczas pobierania

CVE-2017-17772CRITICAL9.8PL ✓same product

Qualcomm SD 450/625/820 — odczyt poza granicami bufora w obsłudze ramek 802.11

CVE-2017-11076CRITICAL9.8PL ✓same product

Qualcomm: Nieprawidłowy dostęp do pamięci przy dekodowaniu VP9 (sprzętowe)