CVE-2018-11858

—

CVSS 3.0

7.8 high

EPSS

<1%p11

Published

Oct 29, 2018 (Oct 29, 2018)

Modified

Jun 17, 2026

Description

When processing IE set command, buffer overwrite may occur due to lack of input validation of the IE length in Snapdragon Mobile in version SD 835, SD 845, SD 850.

Vendors: qualcomm
Products: sd 835 firmware, sd 845 firmware, sd 850 firmware
Weakness: CWE-119
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.