PT-2019-8039

CVE-2017-15841

·

Published

2019-05-06

·

Updated

2019-10-03

Description by

CVSS 2.0
4.9
Medium
MetricsAV:L/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon Mobile versions SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 835
Description The issue occurs when the HOST sends a Special command ID packet, triggering a RAM Dump and firmware reset in the affected Qualcomm Snapdragon Mobile versions.
Recommendations For versions SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 835, consider restricting access to the Special command ID packet to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾