CVE-2018-11268

—

CVSS 3.0

7.8 high

EPSS

<1%p20

Published

Sep 20, 2018 (Sep 20, 2018)

Modified

Jun 17, 2026

Description

In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, SDM710, SDX20, Snapdragon_High_Med_2016, a potential buffer overflow exists when parsing TFTP options.

Vendors: qualcomm
Products: mdm9206 firmware, mdm9607 firmware, mdm9635m firmware, mdm9640 firmware, mdm9645 firmware, mdm9650 firmware, mdm9655 firmware, msm8909w firmware, msm8996au firmware, sd210 firmware, sd212 firmware, sd205 firmware
Weakness: CWE-129
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.