CVE-2018-11279

—

CVSS 3.0

8.8 high

EPSS

<1%p42

Published

Jan 18, 2019 (Jan 18, 2019)

Modified

Jun 17, 2026

Description

Lack of check of input size can make device memory get corrupted because of buffer overflow in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 636, SD 650/52, SD 712 / SD 710 / SD 670, SD 810, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDM439, SDM630, SDM660, SDX20, Snapdragon_High_Med_2016, SXR1130

Vendors: qualcomm
Products: mdm9206 firmware, mdm9607 firmware, mdm9615 firmware, mdm9625 firmware, mdm9635m firmware, mdm9640 firmware, mdm9645 firmware, mdm9650 firmware, mdm9655 firmware, msm8909w firmware, msm8996au firmware, sd 210 firmware
Weakness: CWE-119
Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.