CVEvulnerability
CVE-2018-11291
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2018-09-20
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-338
Description
In Snapdragon (Automobile, Mobile, Wear) in version IPQ8074, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA4531, QCA6174A, QCA6564, QCA6574, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9378, QCA9379, SD 425, SD 427, SD 430, SD 435, SD 450, SD 600, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDM630, SDM632, SDM636, SDM660, SDX20, Snapdragon_High_Med_2016, cryptographic issues due to the random number generator was not a strong one in NAN.
Affected configurations
• qualcomm ipq8074 firmware
• qualcomm mdm9206 firmware
• qualcomm mdm9607 firmware
• qualcomm mdm9640 firmware
• qualcomm mdm9650 firmware
• qualcomm msm8996au firmware
• qualcomm qca4531 firmware
• qualcomm qca6174a firmware
• qualcomm qca6564 firmware
• qualcomm qca6574 firmware
• qualcomm qca6574au firmware
• qualcomm qca6584 firmware
• qualcomm qca6584au firmware
• qualcomm qca9377 firmware
• qualcomm qca9378 firmware
• qualcomm qca9379 firmware
• qualcomm sd425 firmware
• qualcomm sd427 firmware
• qualcomm sd430 firmware
• qualcomm sd435 firmware
• qualcomm sd450 firmware
• qualcomm sd600 firmware
• qualcomm sd625 firmware
• qualcomm sd650 firmware
• qualcomm sd652 firmware
• qualcomm sd810 firmware
• qualcomm sd820 firmware
• qualcomm sd820a firmware
• qualcomm sd835 firmware
• qualcomm sd845 firmware
• qualcomm sd850 firmware
• qualcomm sdm630 firmware
• qualcomm sdm632 firmware
• qualcomm sdm636 firmware
• qualcomm sdm660 firmware
• qualcomm sdx20 firmware
Related
Weakness · CWE (1)
- CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) weakness
References
- http://www.securityfocus.com/bid/107681 www.securityfocus.com
- https://www.qualcomm.com/company/product-security/bulletins Vendor Advisory
- http://www.securityfocus.com/bid/107681 www.securityfocus.com
- https://www.qualcomm.com/company/product-security/bulletins Vendor Advisory