CVE-2018-11850

—

CVSS 3.0

7.8 high

EPSS

<1%p15

Published

Oct 26, 2018 (Oct 26, 2018)

Modified

Jun 17, 2026

Description

Lack of check on remaining length parameter When processing scan start command will lead to buffer flow in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6174A, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9379, SD 210/SD 212/SD 205, SD 425, SD 625, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDX20

Vendors: qualcomm
Products: mdm9206 firmware, mdm9607 firmware, mdm9640 firmware, mdm9650 firmware, msm8996au firmware, qca6174a firmware, qca6574au firmware, qca6584 firmware, qca6584au firmware, qca9377 firmware, qca9379 firmware, sd 210 firmware
Weakness: CWE-119
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.