{"id":"CVE-2018-12004","aliases":["EUVD-2018-3996","GHSA-gh29-2fvf-28mm"],"status":"published","title":"Secure keypad is unlocked with secure display still intact in Snapdragon Auto, Snapdragon Compute...","description":"Secure keypad is unlocked with secure display still intact in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wearables in MDM9206, MDM9607, MDM9650, MDM9655, QCS605, SD 210/SD 212/SD 205, SD 410/12, SD 615/16/SD 415, SD 636, SD 712 / SD 710 / SD 670, SD 835, SD 845 / SD 850, SD 8CX, SDA660, SDM630, SDM660, SXR1130","severity":{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00204,"percentile":0.10426,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2019-05-24T16:44:16Z","modified":"2026-06-17T01:36:58Z","products":[{"vendor":"qualcomm","product":"mdm9206_firmware"},{"vendor":"qualcomm","product":"mdm9607_firmware"},{"vendor":"qualcomm","product":"mdm9650_firmware"},{"vendor":"qualcomm","product":"mdm9655_firmware"},{"vendor":"qualcomm","product":"qcs605_firmware"},{"vendor":"qualcomm","product":"sd_205_firmware"},{"vendor":"qualcomm","product":"sd_210_firmware"},{"vendor":"qualcomm","product":"sd_212_firmware"},{"vendor":"qualcomm","product":"sd_410_firmware"},{"vendor":"qualcomm","product":"sd_412_firmware"},{"vendor":"qualcomm","product":"sd_415_firmware"},{"vendor":"qualcomm","product":"sd_615_firmware"},{"vendor":"qualcomm","product":"sd_616_firmware"},{"vendor":"qualcomm","product":"sd_636_firmware"},{"vendor":"qualcomm","product":"sd_670_firmware"},{"vendor":"qualcomm","product":"sd_710_firmware"},{"vendor":"qualcomm","product":"sd_712_firmware"},{"vendor":"qualcomm","product":"sd_835_firmware"},{"vendor":"qualcomm","product":"sd_845_firmware"},{"vendor":"qualcomm","product":"sd_850_firmware"},{"vendor":"qualcomm","product":"sd_8cx_firmware"},{"vendor":"qualcomm","product":"sda660_firmware"},{"vendor":"qualcomm","product":"sdm630_firmware"},{"vendor":"qualcomm","product":"sdm660_firmware"},{"vendor":"qualcomm","product":"sxr1130_firmware"},{"vendor":"qualcomm, inc.","product":"snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice \u0026 music, snapdragon wearables"}],"references":[{"url":"https://www.qualcomm.com/company/product-security/bulletins#_CVE-2018-12004","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-12004"},{"url":"https://github.com/advisories/GHSA-gh29-2fvf-28mm"}],"sources":{"cve":[{"id":"CVE-2018-12004","description":"Secure keypad is unlocked with secure display still intact in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wearables in MDM9206, MDM9607, MDM9650, MDM9655, QCS605, SD 210/SD 212/SD 205, SD 410/12, SD 615/16/SD 415, SD 636, SD 712 / SD 710 / SD 670, SD 835, SD 845 / SD 850, SD 8CX, SDA660, SDM630, SDM660, SXR1130","status":"published","published":"2019-05-24T16:44:16Z","modified":"2024-08-05T08:24:03.524Z","updated_at":"2026-11-02T14:35:06.320867Z"}],"euvd":[{"id":"EUVD-2018-3996","description":"Secure keypad is unlocked with secure display still intact in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wearables in MDM9206, MDM9607, MDM9650, MDM9655, QCS605, SD 210/SD 212/SD 205, SD 410/12, SD 615/16/SD 415, SD 636, SD 712 / SD 710 / SD 670, SD 835, SD 845 / SD 850, SD 8CX, SDA660, SDM630, SDM660, SXR1130","status":"published","published":"2019-05-24T16:44:16Z","modified":"2024-08-05T08:24:03Z","updated_at":"2026-11-03T02:39:53.575925Z"}],"ghsa":[{"id":"GHSA-gh29-2fvf-28mm","title":"Secure keypad is unlocked with secure display still intact in Snapdragon Auto, Snapdragon Compute...","description":"Secure keypad is unlocked with secure display still intact in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wearables in MDM9206, MDM9607, MDM9650, MDM9655, QCS605, SD 210/SD 212/SD 205, SD 410/12, SD 615/16/SD 415, SD 636, SD 712 / SD 710 / SD 670, SD 835, SD 845 / SD 850, SD 8CX, SDA660, SDM630, SDM660, SXR1130","status":"published","published":"2022-05-24T16:46:34Z","modified":"2024-04-04T00:47:09Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:55:52.162148Z"}],"nvd":[{"id":"CVE-2018-12004","description":"Secure keypad is unlocked with secure display still intact in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wearables in MDM9206, MDM9607, MDM9650, MDM9655, QCS605, SD 210/SD 212/SD 205, SD 410/12, SD 615/16/SD 415, SD 636, SD 712 / SD 710 / SD 670, SD 835, SD 845 / SD 850, SD 8CX, SDA660, SDM630, SDM660, SXR1130","status":"published","published":"2019-05-24T17:29:01.727Z","modified":"2026-06-17T01:36:58.79Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.9,"vector":"AV:L/AC:L/Au:N/C:C/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:04:57.307075Z"}]}}