CVE-2018-11846

The use of a non-time-constant memory comparison operation can lead to timing/side channel attacks in Snapdragon Mobile in version SD 210/SD 212/SD 205, SD 845, SD 850

Score

CVSS 3.0 4.7 Medium

Status

Modified - product-security@qualcomm.com

Published

2018-10-26

Last modified

2024-08-05

Weaknesses

CWE-200

Affected products

• Sd 205 Firmware (Qualcomm)
• Sd 210 Firmware (Qualcomm)
• Sd 212 Firmware (Qualcomm)
• Sd 845 Firmware (Qualcomm)
• Sd 850 Firmware (Qualcomm)
• Snapdragon Mobile (Qualcomm Inc.)

References

• https://www.qualcomm.com/company/product-security/bulletins