AndroidVulnerabilities.org

CVE-2018-3591

(json)

• CVE numbers: CVE-2018-3591 [Bulletin-CVE-2018-3591]
• Coordinated disclosure?: unknown
• Categories: Qualcomm closed-source components
• Details: In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9650, MDM9655, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 835, SD 845, SDM630, SDM636, SDM660, Snapdragon_High_Med_2016, the default build configuration of deviceprogrammer in BOOT.BF.3.0 enables the flag SKIP_SECBOOT_CHECK_NOT_RECOMMENDED_BY_QUALCOMM which will open up the peek and poke commands to any memory location on the target. [NIST-CVE-2018-3591]
• Discovered by: on: Unknown
• Reported on: 2018-04-01 [Bulletin-CVE-2018-3591]
• Fixed on: Unknown
• Fix released on: 2018-04-05 [Bulletin-CVE-2018-3591]
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2018-3591]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-25