CVSS 3.0
5.5 mediumCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NCVE-2018-11820
Medium (5.5) in qualcomm. EPSS 0.2% chance of exploitation in the next 30 days.
Use of non-time constant memcmp function creates side channel that leaks information and leads to cryptographic issues in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in versions IPQ8074, MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MDM9655, MSM8996AU, QCA8081, QCS605, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 712 / SD 710 / SD 670, SD 800, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130.
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 13% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- qualcomm:ipq8074_firmware
- qualcomm:mdm9150_firmware
- qualcomm:mdm9206_firmware
- qualcomm:mdm9607_firmware
- qualcomm:mdm9640_firmware
- qualcomm:mdm9650_firmware
- qualcomm:mdm9655_firmware
- qualcomm:msm8996au_firmware
- qualcomm:qca8081_firmware
- qualcomm:qcs605_firmware
- qualcomm:sd_205_firmware
- qualcomm:sd_210_firmware
- qualcomm:sd_212_firmware
- qualcomm:sd_410_firmware
- qualcomm:sd_412_firmware
- qualcomm:sd_415_firmware
- qualcomm:sd_425_firmware
- qualcomm:sd_427_firmware
- qualcomm:sd_429_firmware
- qualcomm:sd_430_firmware
- qualcomm:sd_435_firmware
- qualcomm:sd_439_firmware
- qualcomm:sd_450_firmware
- qualcomm:sd_615_firmware
- qualcomm:sd_616_firmware
- qualcomm:sd_625_firmware
- qualcomm:sd_632_firmware
- qualcomm:sd_636_firmware
- qualcomm:sd_650_firmware
- qualcomm:sd_652_firmware
- qualcomm:sd_670_firmware
- qualcomm:sd_710_firmware
- qualcomm:sd_712_firmware
- qualcomm:sd_800_firmware
- qualcomm:sd_820_firmware
- qualcomm:sd_820a_firmware
- qualcomm:sd_835_firmware
- qualcomm:sd_845_firmware
- qualcomm:sd_850_firmware
- qualcomm:sd_8cx_firmware
- qualcomm:sda660_firmware
- qualcomm:sdm439_firmware
- qualcomm:sdm630_firmware
- qualcomm:sdm660_firmware
- qualcomm:snapdragon_high_med_2016_firmware
- qualcomm:sxr1130_firmware