CVE-2018-11277
In Snapdragon (Automobile, Mobile, Wear) in version MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SDA660, the com.qualcomm.embms is a vendor package deployed in the system image which has an inadequate permission level and allows any application installed from Play Store to request this permission at install-time. The system application interfaces with the Radio Interface Layer leading to potential access control issue.
Published:Sep 20, 2018
Last Modified:Nov 21, 2024
EPS:Sep 20, 2018
EPSS Score:0.00037
CVSS Score:7.8
Affected Products
Vendor
Product
Action
Vendor
Qualcomm
Product
Msm8909w
Qualcomm
Msm8909w
Vendor
Qualcomm
Product
Msm8909w Firmware
Qualcomm
Msm8909w Firmware
Vendor
Qualcomm
Product
Msm8996au
Qualcomm
Msm8996au
Vendor
Qualcomm
Product
Msm8996au Firmware
Qualcomm
Msm8996au Firmware
Vendor
Qualcomm
Product
Sd205
Qualcomm
Sd205
Vendor
Qualcomm
Product
Sd205 Firmware
Qualcomm
Sd205 Firmware
Vendor
Qualcomm
Product
Sd210
Qualcomm
Sd210
Vendor
Qualcomm
Product
Sd210 Firmware
Qualcomm
Sd210 Firmware
Vendor
Qualcomm
Product
Sd212
Qualcomm
Sd212
Vendor
Qualcomm
Product
Sd212 Firmware
Qualcomm
Sd212 Firmware
Vendor
Qualcomm
Product
Sd415
Qualcomm
Sd415
Vendor
Qualcomm
Product
Sd415 Firmware
Qualcomm
Sd415 Firmware
Vendor
Qualcomm
Product
Sd430
Qualcomm
Sd430
Vendor
Qualcomm
Product
Sd430 Firmware
Qualcomm
Sd430 Firmware
Vendor
Qualcomm
Product
Sd450
Qualcomm
Sd450
Vendor
Qualcomm
Product
Sd450 Firmware
Qualcomm
Sd450 Firmware
Vendor
Qualcomm
Product
Sd615
Qualcomm
Sd615
Vendor
Qualcomm
Product
Sd615 Firmware
Qualcomm
Sd615 Firmware
Vendor
Qualcomm
Product
Sd616
Qualcomm
Sd616
Vendor
Qualcomm
Product
Sd616 Firmware
Qualcomm
Sd616 Firmware
Vendor
Qualcomm
Product
Sd617
Qualcomm
Sd617
Vendor
Qualcomm
Product
Sd617 Firmware
Qualcomm
Sd617 Firmware
Vendor
Qualcomm
Product
Sd625
Qualcomm
Sd625
Vendor
Qualcomm
Product
Sd625 Firmware
Qualcomm
Sd625 Firmware
Vendor
Qualcomm
Product
Sd650
Qualcomm
Sd650
Vendor
Qualcomm
Product
Sd650 Firmware
Qualcomm
Sd650 Firmware
Vendor
Qualcomm
Product
Sd652
Qualcomm
Sd652
Vendor
Qualcomm
Product
Sd652 Firmware
Qualcomm
Sd652 Firmware
Vendor
Qualcomm
Product
Sd810
Qualcomm
Sd810
Vendor
Qualcomm
Product
Sd810 Firmware
Qualcomm
Sd810 Firmware
Vendor
Qualcomm
Product
Sd820
Qualcomm
Sd820
Vendor
Qualcomm
Product
Sd820 Firmware
Qualcomm
Sd820 Firmware
Vendor
Qualcomm
Product
Sd820a
Qualcomm
Sd820a
Vendor
Qualcomm
Product
Sd820a Firmware
Qualcomm
Sd820a Firmware
Vendor
Qualcomm
Product
Sd835
Qualcomm
Sd835
Vendor
Qualcomm
Product
Sd835 Firmware
Qualcomm
Sd835 Firmware
Vendor
Qualcomm
Product
Sd845
Qualcomm
Sd845
Vendor
Qualcomm
Product
Sd845 Firmware
Qualcomm
Sd845 Firmware
Vendor
Qualcomm
Product
Sda660
Qualcomm
Sda660
Vendor
Qualcomm
Product
Sda660 Firmware
Qualcomm
Sda660 Firmware
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
