CVE-2017-11088
Improper Input Validation in Linux io-prefetch in Snapdragon Mobile and Snapdragon Wear, A SQL injection vulnerability exists in versions MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 430, SD 450, SD 617, SD 625, SD 650/52, SD 820, SD 835, SD 845.
- Score
- CVSS 3.0 9.8 Critical
- Status
- Modified - product-security@qualcomm.com
- Published
- 2018-07-06
- Last modified
- 2024-09-17
- Weaknesses
- CWE-89
Affected products
- Msm8909w Firmware (Qualcomm)
- Msm8996au Firmware (Qualcomm)
- Sd 205 Firmware (Qualcomm)
- Sd 210 Firmware (Qualcomm)
- Sd 212 Firmware (Qualcomm)
- Sd 430 Firmware (Qualcomm)
- Sd 450 Firmware (Qualcomm)
- Sd 617 Firmware (Qualcomm)
- Sd 625 Firmware (Qualcomm)
- Sd 650 Firmware (Qualcomm)
- Sd 652 Firmware (Qualcomm)
- Sd 820 Firmware (Qualcomm)
- Sd 835 Firmware (Qualcomm)
- Sd 845 Firmware (Qualcomm)
- Snapdragon Mobile (Qualcomm Inc.)
- Snapdragon Wear (Qualcomm Inc.)
References
- https://www.qualcomm.com/company/product-security/bulletins
