CVE-2018-11259: High severity Google Android vulnerability
Due to Improper Access Control of NAND-based EFS in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, From fastboot on a NAND-based device, the EFS partition can be erased. Apps processor then has non-secure world full read/write access to the partition until the modem boots and configures the EFS partition addresses in its MPU partition.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-11259?
CVE-2018-11259 is classified as a critical severity vulnerability due to improper access control.
How do I fix CVE-2018-11259?
Users should update their Qualcomm Snapdragon devices to the latest firmware version that addresses CVE-2018-11259.
Which devices are affected by CVE-2018-11259?
Devices with Snapdragon automobile, mobile, and wear chipsets that use NAND-based EFS are affected by CVE-2018-11259.
What can happen if CVE-2018-11259 is exploited?
Exploitation of CVE-2018-11259 could allow unauthorized users to erase the EFS partition, posing security risks.
Is CVE-2018-11259 a hardware or software vulnerability?
CVE-2018-11259 is primarily a software vulnerability related to the firmware of Qualcomm Snapdragon devices.