{"id":"CVE-2018-3588","aliases":["EUVD-2018-15442","GHSA-m789-4qgv-8wjh"],"status":"published","title":"There is improper access control of the SSC and GPU mapped regions which lead to inject code from...","description":"There is improper access control of the SSC and GPU mapped regions which lead to inject code from HLOS in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 820, SD 820A, SD 835, SDA660.","severity":{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00208,"percentile":0.11042,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2018-10-26T13:00:00Z","modified":"2026-06-17T01:57:30Z","products":[{"vendor":"qualcomm","product":"mdm9206_firmware"},{"vendor":"qualcomm","product":"mdm9607_firmware"},{"vendor":"qualcomm","product":"mdm9650_firmware"},{"vendor":"qualcomm","product":"msm8996au_firmware"},{"vendor":"qualcomm","product":"sd_205_firmware"},{"vendor":"qualcomm","product":"sd_210_firmware"},{"vendor":"qualcomm","product":"sd_212_firmware"},{"vendor":"qualcomm","product":"sd_820_firmware"},{"vendor":"qualcomm","product":"sd_820a_firmware"},{"vendor":"qualcomm","product":"sd_835_firmware"},{"vendor":"qualcomm","product":"sda660_firmware"},{"vendor":"qualcomm, inc.","product":"snapdragon automobile, snapdragon mobile, snapdragon wear"}],"references":[{"url":"https://www.qualcomm.com/company/product-security/bulletins","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-3588"},{"url":"https://github.com/advisories/GHSA-m789-4qgv-8wjh"}],"sources":{"cve":[{"id":"CVE-2018-3588","description":"There is improper access control of the SSC and GPU mapped regions which lead to inject code from HLOS in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 820, SD 820A, SD 835, SDA660.","status":"published","published":"2018-10-26T13:00:00Z","modified":"2024-08-05T04:50:29.077Z","updated_at":"2026-11-02T14:35:05.262903Z"}],"euvd":[{"id":"EUVD-2018-15442","description":"There is improper access control of the SSC and GPU mapped regions which lead to inject code from HLOS in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 820, SD 820A, SD 835, SDA660.","status":"published","published":"2018-10-26T13:00:00Z","modified":"2024-08-05T04:50:29Z","updated_at":"2026-11-03T02:40:15.759349Z"}],"ghsa":[{"id":"GHSA-m789-4qgv-8wjh","title":"There is improper access control of the SSC and GPU mapped regions which lead to inject code from...","description":"There is improper access control of the SSC and GPU mapped regions which lead to inject code from HLOS in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 820, SD 820A, SD 835, SDA660.","status":"published","published":"2022-05-13T01:52:32Z","modified":"2023-02-02T05:02:14Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T14:51:23.375018Z"}],"nvd":[{"id":"CVE-2018-3588","description":"There is improper access control of the SSC and GPU mapped regions which lead to inject code from HLOS in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 820, SD 820A, SD 835, SDA660.","status":"published","published":"2018-10-26T13:29:01.823Z","modified":"2026-06-17T01:57:30.663Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:04:46.409324Z"}]}}