What is CVE-2018-5839?

CVE-2018-5839 is a high-severity vulnerability in Qualcomm Mdm9150, classified under Improper Privilege Management. CVSS score: 7.1/10. Published 2019-02-25.

How severe is CVE-2018-5839?

High severity. CVSS v3 base score is 7.1 out of 10.

Privilege escalation in Qualcomm Mdm9150

CVE-2018-5839

Improperly configured memory protection allows read/write access to modem image from HLOS kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in versions MDM9150, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8996AU, QCS605, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM630, SDM660, SDX20, SXR1130.

Vulnerability class: Privilege Escalation

EPSS: 0.002 (11.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.1 (High). Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N.

Affected products

Weakness classification (CWE)

CWE-269 — Improper Privilege Management

References

product-security@qualcomm.com (x_refsource_CONFIRM, Vendor Advisory)
product-security@qualcomm.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)

Frequently asked questions

What is CVE-2018-5839?: CVE-2018-5839 is a high-severity vulnerability in Qualcomm Mdm9150, classified under Improper Privilege Management. CVSS score: 7.1/10. Published 2019-02-25.
How severe is CVE-2018-5839?: High severity. CVSS v3 base score is 7.1 out of 10.