CVEvulnerability
CVE-2018-11854
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2018-10-26
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Lack of check of valid length of input parameter may cause buffer overwrite in WLAN in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660
Affected configurations
• qualcomm sd 835 firmware
• qualcomm sd 845 firmware
• qualcomm sd 850 firmware
• qualcomm sda660 firmware
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://www.securityfocus.com/bid/107681 Third Party Advisory, VDB Entry
- https://www.qualcomm.com/company/product-security/bulletins Vendor Advisory
- http://www.securityfocus.com/bid/107681 Third Party Advisory, VDB Entry
- https://www.qualcomm.com/company/product-security/bulletins Vendor Advisory