CVE-2018-13918

—

CVSS 3.0

7.8 high

EPSS

<1%p13

Published

Apr 4, 2019 (Apr 4, 2019)

Modified

Jun 17, 2026

Description

kernel could return a received message length higher than expected, which leads to buffer overflow in a subsequent operation and stops normal operation in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, in MDM9150, MDM9206, MDM9607, MDM9650, MSM8909W, QCS605, Qualcomm 215, SD 425, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 675, SD 712 / SD 710 / SD 670, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDM439, SDX24, SM7150

Vendors: qualcomm
Products: mdm9150 firmware, mdm9206 firmware, mdm9607 firmware, mdm9650 firmware, msm8909w firmware, qcs605 firmware, qm215 firmware, sd 425 firmware, sd 439 firmware, sd 429 firmware, sd 450 firmware, sd 625 firmware
Weakness: CWE-119
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.