CVE-2018-11971: Qualcomm MDM9206 Firmware

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Interrupt exit code flow may undermine access control policy set forth by secure world can lead to potential secure asset leakage in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, in MDM9206, MDM9607, MDM9650, MDM9655, QCS605, SD 410/12, SD 615/16/SD 415, SD 636, SD 712 / SD 710 / SD 670, SD 845 / SD 850, SD 8CX, SDA660, SDM630, SDM660, SXR1130

Affected products

Qualcomm MDM9206 Firmware: affected versions not specified
Qualcomm MDM9607 Firmware: affected versions not specified
Qualcomm MDM9650 Firmware: affected versions not specified
Qualcomm MDM9655 Firmware: affected versions not specified
Qualcomm QCS605 Firmware: affected versions not specified
Qualcomm Sd 410 Firmware: affected versions not specified
Qualcomm Sd 412 Firmware: affected versions not specified
Qualcomm Sd 415 Firmware: affected versions not specified
Qualcomm Sd 615 Firmware: affected versions not specified
Qualcomm Sd 616 Firmware: affected versions not specified
Qualcomm Sd 636 Firmware: affected versions not specified
Qualcomm Sd 670 Firmware: affected versions not specified
Qualcomm Sd 710 Firmware: affected versions not specified
Qualcomm Sd 712 Firmware: affected versions not specified
Qualcomm Sd 845 Firmware: affected versions not specified
Qualcomm Sd 850 Firmware: affected versions not specified
Qualcomm Sd 8cx Firmware: affected versions not specified
Qualcomm SDA660 Firmware: affected versions not specified
Qualcomm SDM630 Firmware: affected versions not specified
Qualcomm SDM660 Firmware: affected versions not specified
Qualcomm SXR1130 Firmware: affected versions not specified

Published 2019-04-04. Last modified 2026-06-17.