{"vulnerability": "cve-2018-1389", "sightings": [{"uuid": "589ae0fe-d07a-4c41-bfeb-4a1c13ee8ae5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2018-13896", "type": "seen", "source": "https://t.me/cibsecurity/5637", "content": "ATENTION\u203c New - CVE-2018-13896\n\nXBL_SEC image authentication and other crypto related validations are accessible to a compromised OEM XBL Loader due to missing lock at XBL_SEC stage.. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in MDM9206, MDM9607, MDM9650, MDM9655, MSM8996AU, QCS404, QCS605, Qualcomm 215, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2019-07-22T18:28:17.000000Z"}, {"uuid": "96846f4b-d60d-47ac-8887-6830238112a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2018-13897", "type": "seen", "source": "https://t.me/cibsecurity/5715", "content": "ATENTION\u203c New - CVE-2018-13897\n\nClients hostname gets added to DNS record on device which is running dnsmasq resulting in an information exposure in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Wearables in MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS605, SD 210/SD 212/SD 205, SD 615/16/SD 415, SD 625, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 855, SDA660, SDM630, SDM660\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2019-07-25T20:31:33.000000Z"}, {"uuid": "03d123c2-4216-4a35-a036-611372e7c12c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2018-13895", "type": "seen", "source": "https://t.me/cve_mitre_org/293", "content": "CVE-2018-13895 Due to the missing permissions on several content providers of the RCS app in its android manifest file will lead to an unprivileged access to phone in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,... https://t.co/s6QYKvXBhE\u2014 CVE (@CVEnew) May 24, 2019\n\nMay 24, 2019 at 08:45PM\nvia Twitter https://twitter.com/CVEnew", "creation_timestamp": "2019-05-24T17:48:08.000000Z"}, {"uuid": "1e83bd5f-8570-4a58-ad81-43e300af0429", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2018-13899", "type": "seen", "source": "https://t.me/cve_mitre_org/294", "content": "CVE-2018-13899 Processing messages after error may result in user after free memory fault in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM... https://t.co/SA4qzOOlnO\u2014 CVE (@CVEnew) May 24, 2019\n\nMay 24, 2019 at 08:45PM\nvia Twitter https://twitter.com/CVEnew", "creation_timestamp": "2019-05-24T17:48:09.000000Z"}]}