CVEvulnerability

CVE-2018-11830

7.8 HIGH Published 2019-04-04 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-04-04
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-20

Description

Improper input validation in QCPE create function may lead to integer overflow in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9206, MDM9607, MDM9650, MDM9655, MSM8996AU, SD 410/12, SD 820A

Affected configurations

• qualcomm mdm9206 firmware • qualcomm mdm9607 firmware • qualcomm mdm9650 firmware • qualcomm mdm9655 firmware • qualcomm msm8996au firmware • qualcomm sd 410 firmware • qualcomm sd 412 firmware • qualcomm sd 820a firmware

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References