In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9650, MDM9655, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 835, SD 845, SDM630, SDM636, SDM660, Snapdragon_High_Med_2016, the default build configuration of deviceprogrammer in BOOT.BF.3.0 enables the flag SKIP_SECBOOT_CHECK_NOT_RECOMMENDED_BY_QUALCOMM which will open up the peek and poke commands to any memory location on the target.

Project Subscriptions

Vendors Products
Qualcomm Subscribe
Mdm9206 Subscribe
Mdm9206 Firmware Subscribe
Mdm9607 Subscribe
Mdm9607 Firmware Subscribe
Mdm9635m Subscribe
Mdm9635m Firmware Subscribe
Mdm9650 Subscribe
Mdm9650 Firmware Subscribe
Mdm9655 Subscribe
Mdm9655 Firmware Subscribe
Sd 205 Firmware Subscribe
Sd 210 Firmware Subscribe
Sd 212 Firmware Subscribe
Sd 410 Firmware Subscribe
Sd 412 Firmware Subscribe
Sd 415 Firmware Subscribe
Sd 425 Firmware Subscribe
Sd 427 Firmware Subscribe
Sd 430 Firmware Subscribe
Sd 435 Firmware Subscribe
Sd 450 Firmware Subscribe
Sd 615 Firmware Subscribe
Sd 616 Firmware Subscribe
Sd 625 Firmware Subscribe
Sd 650 Firmware Subscribe
Sd 652 Firmware Subscribe
Sd 820 Firmware Subscribe
Sd 835 Firmware Subscribe
Sd 845 Firmware Subscribe
Sdm630 Firmware Subscribe
Sdm636 Firmware Subscribe
Sdm660 Firmware Subscribe
Advisories
Source ID Title
EUVD EUVD EUVD-2018-15445 In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9650, MDM9655, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 835, SD 845, SDM630, SDM636, SDM660, Snapdragon_High_Med_2016, the default build configuration of deviceprogrammer in BOOT.BF.3.0 enables the flag SKIP_SECBOOT_CHECK_NOT_RECOMMENDED_BY_QUALCOMM which will open up the peek and poke commands to any memory location on the target.
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

No history.

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: qualcomm

Published:

Updated: 2024-09-17T02:01:36.247Z

Reserved: 2017-12-19T00:00:00.000Z

Link: CVE-2018-3591

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2018-04-11T15:29:01.897

Modified: 2024-11-21T04:05:43.533

Link: CVE-2018-3591

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses