CVE-2018-11871
—CVSS 3.0
7.8 high
EPSS
<1%p13
Published
()
Modified
Description
Buffer overwrite can happen in WLAN function while processing set pdev parameter command due to lack of input validation in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version IPQ4019, IPQ8064, IPQ8074, MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MSM8996AU, QCA6174A, QCA6564, QCA6574, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9378, QCA9379, QCA9531, QCA9558, QCA9563, QCA9880, QCA9886, QCA9980, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 600, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDM630, SDM632, SDM636, SDM660, SDM710, SDX20, Snapdragon_High_Med_2016.
- Vendors
- qualcomm
- Products
- ipq4019 firmware, ipq8064 firmware, ipq8074 firmware, mdm9206 firmware, mdm9607 firmware, mdm9635m firmware, mdm9640 firmware, mdm9650 firmware, msm8996au firmware, qca6174a firmware, qca6564 firmware, qca6574 firmware
- Weakness
- CWE-119
- Vector
- CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
In the news0 stories
No ingested article mentions this CVE yet.