CVE-2018-11828

When FW tries to get random mac address generated from new SW RNG and ADC values read are constant then DUT get struck in loop while trying to get random ADC samples in Snapdragon Mobile in version SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52

Score

CVSS 3.0 7.5 High

Status

Modified - product-security@qualcomm.com

Published

2018-10-26

Last modified

2024-08-05

Weaknesses

CWE-400

Affected products

• Sd 205 Firmware (Qualcomm)
• Sd 210 Firmware (Qualcomm)
• Sd 212 Firmware (Qualcomm)
• Sd 425 Firmware (Qualcomm)
• Sd 430 Firmware (Qualcomm)
• Sd 450 Firmware (Qualcomm)
• Sd 625 Firmware (Qualcomm)
• Sd 650 Firmware (Qualcomm)
• Sd 652 Firmware (Qualcomm)
• Snapdragon Mobile (Qualcomm Inc.)

References

• http://www.securityfocus.com/bid/107681
• https://www.qualcomm.com/company/product-security/bulletins