CVE-2018-11980

—

CVSS 3.1

7.8 high

EPSS

<1%p12

Published

Dec 18, 2019 (Dec 18, 2019)

Modified

Jun 17, 2026

Description

When a fake broadcast/multicast 11w rmf without mmie received, since no proper length check in wma_process_bip, buffer overflow will happen in both cds_is_mmie_valid and qdf_nbuf_trim_tail in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096AU, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8937, MSM8996AU, MSM8998, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCN7605, QCS605, SDM630, SDM636, SDM660, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130

Vendors: qualcomm
Products: apq8009 firmware, apq8017 firmware, apq8053 firmware, apq8064 firmware, apq8096au firmware, mdm9206 firmware, mdm9207c firmware, mdm9607 firmware, mdm9640 firmware, mdm9650 firmware, msm8937 firmware, msm8996au firmware
Weakness: CWE-120
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.