CVE-2018-13904

Improper input validation in SCM handler to access storage in TZ can lead to unauthorized access in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in versions MDM9206, MDM9607, MDM9650, MDM9655, QCS605, SD 410/12, SD 675, SD 712 / SD 710 / SD 670, SD 8CX, SXR1130.

• CWE-20

• http://www.securityfocus.com/bid/106845Third Party Advisory, VDB Entry
• https://www.qualcomm.com/company/product-security/bulletinsVendor Advisory
• http://www.securityfocus.com/bid/106845Third Party Advisory, VDB Entry
• https://www.qualcomm.com/company/product-security/bulletinsVendor Advisory

Published

Feb 25, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-13899Processing messages after error may result in user after fre…
• CVE-2018-1390IBM Financial Transaction Manager for Check Services for Mul…5.4
• CVE-2018-13900Use-after-free vulnerability will occur as there is no prote…
• CVE-2018-13901Due to missing permissions in Android Manifest file, Sensiti…
• CVE-2018-13902Out of bounds memory read and access due to improper array i…
• CVE-2018-13903u'Error in UE due to race condition in EPCO handling' in Sna…8.1
• CVE-2018-13905KGSL syncsource lock not handled properly during syncsource …
• CVE-2018-13906The HMAC authenticating the message from QSEE is vulnerable …
• CVE-2018-13907While deserializing any key blob during key operations, buff…
• CVE-2018-13908Truncated access authentication token leads to weakened acce…
• CVE-2018-13909Metadata verification and partial hash system calls by bootl…
• CVE-2018-1391IBM Financial Transaction Manager 3.0.4 and 3.1.0 for ACH Se…