What is the severity of CVE-2018-13913?

The severity of CVE-2018-13913 is classified as high due to its potential to allow unauthorized access.

How do I fix CVE-2018-13913?

To fix CVE-2018-13913, update to the latest firmware version provided by Qualcomm that addresses this vulnerability.

Which Qualcomm devices are affected by CVE-2018-13913?

CVE-2018-13913 affects various Qualcomm Snapdragon Auto, Consumer IoT, Industrial IoT, Mobile, Voice & Music, and Wearables devices.

What type of vulnerability is CVE-2018-13913?

CVE-2018-13913 is an improper validation of array index leading to unauthorized access during debugFS processing.

When was CVE-2018-13913 disclosed?

CVE-2018-13913 was disclosed in February 2019 as part of the Code Aurora security bulletin.

Vulnerability/
CVE-2018-13913

high

7.8

CWE

129

25/2/2019

5/8/2024

CVE-2018-13913: Out-of-bounds Read

First published: Mon Feb 25 2019(Updated: )

Improper validation of array index can lead to unauthorized access while processing debugFS in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in version MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS605, SD 210/SD 212/SD 205, SD 425, SD 439 / SD 429, SD 615/16/SD 415, SD 625, SD 636, SD 650/52, SD 712 / SD 710 / SD 670, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24.

Credit: product-security@qualcomm.com

Affected Software	Affected Version	How to fix
Qualcomm Snapdragon Auto 4G Firmware
Qualcomm Snapdragon Auto
Qualcomm Snapdragon Consumer Internet of Things Firmware
Qualcomm Snapdragon
Qualcomm Snapdragon Industrial Internet of Things
Qualcomm Snapdragon
Qualcomm Snapdragon Internet of Things Firmware
Qualcomm Snapdragon Internet of Things Firmware
Qualcomm Snapdragon Mobile Firmware
Qualcomm Snapdragon Mobile
Qualcomm Snapdragon Voice & Music firmware
Qualcomm Snapdragon Voice & Music
Qualcomm MDM9150 Firmware
Qualcomm MDM9150 firmware
Qualcomm MDM9206
Qualcomm MDM9206 firmware
Qualcomm MD9607 Firmware
Qualcomm MDM9607 firmware
Qualcomm MDM9640 Firmware
Qualcomm MDM9640 Firmware
Qualcomm MDM9650
Qualcomm MDM9650 firmware
Qualcomm 8909 Firmware
Qualcomm Snapdragon 8909
qualcomm MSM8996AU firmware
Qualcomm MSM8996AU Firmware
Qualcomm QCS605
Qualcomm QCS605 Firmware
Qualcomm SD210 Firmware
Qualcomm SD 210 Firmware
Qualcomm SD 212
Qualcomm SD 212 Firmware
Qualcomm 205 Firmware
Qualcomm SD205 Firmware
Qualcomm SDR425 Firmware
Qualcomm Snapdragon 425
qualcomm SDM439 firmware
Qualcomm PM439
Qualcomm SDA429W Firmware
Qualcomm SD 429 Firmware
Qualcomm SD615 Firmware
Qualcomm Snapdragon 615
Qualcomm SD 616 Firmware
Qualcomm Snapdragon 616
Qualcomm Snapdragon 415 Firmware
Qualcomm Snapdragon 415
Qualcomm SD 625 Firmware
Qualcomm Snapdragon 625
Qualcomm SDM636 Firmware
Qualcomm Snapdragon 636
Qualcomm SD650 Firmware
Qualcomm Snapdragon 650
Qualcomm SD652 Firmware
Qualcomm SD652 Firmware
Qualcomm Snapdragon 712 Firmware
Qualcomm Snapdragon 712
Qualcomm SD710 Firmware
Qualcomm Snapdragon 710
Qualcomm SD 670
Qualcomm SDM670
Qualcomm SD820A Firmware
Qualcomm SD820A Firmware
Qualcomm SD835 Firmware
Qualcomm Snapdragon 835
Qualcomm SDA845 Firmware
Qualcomm SD845
Qualcomm SD850 Firmware
Qualcomm SD850
Qualcomm SD855 Firmware
Qualcomm SD855 Firmware
Qualcomm SDA660
Qualcomm SDA660
Qualcomm SDM439 Firmware
Qualcomm SDM439 Firmware
Qualcomm SDM630
Qualcomm SDM630 Firmware
Qualcomm SD660 Firmware
Qualcomm Snapdragon 660
Qualcomm SDX20 Firmware
Qualcomm SDX20 Firmware
Qualcomm SDX24
Qualcomm SDX24

Remedy

https://www.codeaurora.org/security-bulletin/2019/02/04/february-2019-code-aurora-security-bulletin

Never miss a vulnerability like this again

Reference Links

https://www.codeaurora.org/security-bulletin/2019/02/04/february-2019-code-aurora-security-bulletin

Frequently Asked Questions

What is the severity of CVE-2018-13913?
The severity of CVE-2018-13913 is classified as high due to its potential to allow unauthorized access.
How do I fix CVE-2018-13913?
To fix CVE-2018-13913, update to the latest firmware version provided by Qualcomm that addresses this vulnerability.
Which Qualcomm devices are affected by CVE-2018-13913?
CVE-2018-13913 affects various Qualcomm Snapdragon Auto, Consumer IoT, Industrial IoT, Mobile, Voice & Music, and Wearables devices.
What type of vulnerability is CVE-2018-13913?
CVE-2018-13913 is an improper validation of array index leading to unauthorized access during debugFS processing.
When was CVE-2018-13913 disclosed?
CVE-2018-13913 was disclosed in February 2019 as part of the Code Aurora security bulletin.