7.8

CVE-2018-11268

In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, SDM710, SDX20, Snapdragon_High_Med_2016, a potential buffer overflow exists when parsing TFTP options.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ Mdm9206 Firmware Version -
   Qualcomm ≫ Mdm9206 Version -
Qualcomm ≫ Mdm9607 Firmware Version -
   Qualcomm ≫ Mdm9607 Version -
Qualcomm ≫ Mdm9635m Firmware Version -
   Qualcomm ≫ Mdm9635m Version -
Qualcomm ≫ Mdm9640 Firmware Version -
   Qualcomm ≫ Mdm9640 Version -
Qualcomm ≫ Mdm9645 Firmware Version -
   Qualcomm ≫ Mdm9645 Version -
Qualcomm ≫ Mdm9650 Firmware Version -
   Qualcomm ≫ Mdm9650 Version -
Qualcomm ≫ Mdm9655 Firmware Version -
   Qualcomm ≫ Mdm9655 Version -
Qualcomm ≫ Msm8909w Firmware Version -
   Qualcomm ≫ Msm8909w Version -
Qualcomm ≫ Msm8996au Firmware Version -
   Qualcomm ≫ Msm8996au Version -
Qualcomm ≫ Sd210 Firmware Version -
   Qualcomm ≫ Sd210 Version -
Qualcomm ≫ Sd212 Firmware Version -
   Qualcomm ≫ Sd212 Version -
Qualcomm ≫ Sd205 Firmware Version -
   Qualcomm ≫ Sd205 Version -
Qualcomm ≫ Sd425 Firmware Version -
   Qualcomm ≫ Sd425 Version -
Qualcomm ≫ Sd427 Firmware Version -
   Qualcomm ≫ Sd427 Version -
Qualcomm ≫ Sd430 Firmware Version -
   Qualcomm ≫ Sd430 Version -
Qualcomm ≫ Sd435 Firmware Version -
   Qualcomm ≫ Sd435 Version -
Qualcomm ≫ Sd450 Firmware Version -
   Qualcomm ≫ Sd450 Version -
Qualcomm ≫ Sd625 Firmware Version -
   Qualcomm ≫ Sd625 Version -
Qualcomm ≫ Sd650 Firmware Version -
   Qualcomm ≫ Sd650 Version -
Qualcomm ≫ Sd652 Firmware Version -
   Qualcomm ≫ Sd652 Version -
Qualcomm ≫ Sd810 Firmware Version -
   Qualcomm ≫ Sd810 Version -
Qualcomm ≫ Sd820 Firmware Version -
   Qualcomm ≫ Sd820 Version -
Qualcomm ≫ Sd820a Firmware Version -
   Qualcomm ≫ Sd820a Version -
Qualcomm ≫ Sd835 Firmware Version -
   Qualcomm ≫ Sd835 Version -
Qualcomm ≫ Sd845 Firmware Version -
   Qualcomm ≫ Sd845 Version -
Qualcomm ≫ Sd850 Firmware Version -
   Qualcomm ≫ Sd850 Version -
Qualcomm ≫ Sda660 Firmware Version -
   Qualcomm ≫ Sda660 Version -
Qualcomm ≫ Sdm429 Firmware Version -
   Qualcomm ≫ Sdm429 Version -
Qualcomm ≫ Sdm439 Firmware Version -
   Qualcomm ≫ Sdm439 Version -
Qualcomm ≫ Sdm630 Firmware Version -
   Qualcomm ≫ Sdm630 Version -
Qualcomm ≫ Sdm632 Firmware Version -
   Qualcomm ≫ Sdm632 Version -
Qualcomm ≫ Sdm636 Firmware Version -
   Qualcomm ≫ Sdm636 Version -
Qualcomm ≫ Sdm660 Firmware Version -
   Qualcomm ≫ Sdm660 Version -
Qualcomm ≫ Sdm710 Firmware Version -
   Qualcomm ≫ Sdm710 Version -
Qualcomm ≫ Sdx20 Firmware Version -
   Qualcomm ≫ Sdx20 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.28% 0.193
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
CWE-129 Improper Validation of Array Index

The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.

https://www.qualcomm.com/company/product-security/bulletins
Vendor Advisory
http://www.securityfocus.com/bid/106845
Third Party Advisory
VDB Entry