Qualcomm SD 12 Firmware vulnerabilities

5 CVEs affecting Qualcomm SD 12 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-13904, published 2019-02-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-11945, published 2019-02-25. Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days. Improper input validation in wireless service messaging module for data received from broadcast messages can lead to heap overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer…
CVE-2018-13904, published 2019-02-25. Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days. Improper input validation in SCM handler to access storage in TZ can lead to unauthorized access in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon…
CVE-2018-11932, published 2019-02-25. Critical severity, CVSS 9.1. EPSS: 1.1% chance of exploitation in the next 30 days. Improper input validation can lead RW access to secure subsystem from HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon…
CVE-2018-11935, published 2019-02-25. Medium severity, CVSS 5.3. EPSS: 0.8% chance of exploitation in the next 30 days. Improper input validation might result in incorrect app id returned to the caller Instead of returning failure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
CVE-2018-11938, published 2019-02-25. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Improper input validation for argument received from HLOS can lead to buffer overflows and unexpected behavior in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…