CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 10.0
CWE Name:  Permissions Privileges and Access Controls
Summary: in android before 2018-04-05 or earlier security patch level on qualcomm snapdragon automobile, snapdragon mobile, and snapdragon wear mdm9206, mdm9607, mdm9635m, mdm9640, mdm9650, msm8909w, qca6174a, qca6574au, qca9377, qca9379, sd 210/sd 212/sd 205, sd 400, sd 450, sd 410/12, sd 425, sd 430, sd 600, sd 615/16/sd 415, sd 617, sd 625, sd 650/52, sd 800, sd 808, sd 810, sd 820, and sdx20, lack of input validation on bt hci commands processing allows privilege escalation.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2018-04-18
Last Modified Date: 2018-05-09