Description
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, and SD 820A, HMAC verification in counter file uses an insecure memcmp which may assist a timing attack.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile
SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, SD 820Aaffected