CVE-2018-11846

low-risk

Published 2018-10-26

The use of a non-time-constant memory comparison operation can lead to timing/side channel attacks in Snapdragon Mobile in version SD 210/SD 212/SD 205, SD 845, SD 850

Do I need to act?

0.10% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 4.7/10 Medium

LOCAL / HIGH complexity

Affected Products (5)

Sd 210 Firmware

Sd 212 Firmware

Sd 205 Firmware

Sd 845 Firmware

Sd 850 Firmware

Affected Vendors

Qualcomm

References (2)

Vendor Advisory https://www.qualcomm.com/company/product-security/bulletins

/ 100

low-risk

Severity 12/34 · Low

Exploitability 0/34 · Minimal

Exposure 12/34 · Low