PT-2018-6821
CVE-2017-18302
·
تاريخ النشر
2018-09-20
·
تاريخ التحديث
2018-11-23
الوصف من
CVSS 2.0
4.7
متوسطةالمقاييسAV:L/AC:M/Au:N/C:N/I:C/A:N
Name of the Vulnerable Software and Affected Versions:
Snapdragon versions MSM8996AU, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660
Description:
A crafted HLOS client can modify the structure in memory passed to a QSEE application between the time of check and the time of use, resulting in arbitrary writes to TZ kernel memory regions.
Recommendations:
For Snapdragon versions MSM8996AU, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, at the moment, there is no information about a newer version that contains a fix for this issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾