7.8

CVE-2018-11850

Lack of check on remaining length parameter When processing scan start command will lead to buffer flow in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6174A, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9379, SD 210/SD 212/SD 205, SD 425, SD 625, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDX20
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ Mdm9206 Firmware Version -
   Qualcomm ≫ Mdm9206 Version -
Qualcomm ≫ Mdm9607 Firmware Version -
   Qualcomm ≫ Mdm9607 Version -
Qualcomm ≫ Mdm9640 Firmware Version -
   Qualcomm ≫ Mdm9640 Version -
Qualcomm ≫ Mdm9650 Firmware Version -
   Qualcomm ≫ Mdm9650 Version -
Qualcomm ≫ Msm8996au Firmware Version -
   Qualcomm ≫ Msm8996au Version -
Qualcomm ≫ Qca6174a Firmware Version -
   Qualcomm ≫ Qca6174a Version -
Qualcomm ≫ Qca6574au Firmware Version -
   Qualcomm ≫ Qca6574au Version -
Qualcomm ≫ Qca6584 Firmware Version -
   Qualcomm ≫ Qca6584 Version -
Qualcomm ≫ Qca6584au Firmware Version -
   Qualcomm ≫ Qca6584au Version -
Qualcomm ≫ Qca9377 Firmware Version -
   Qualcomm ≫ Qca9377 Version -
Qualcomm ≫ Qca9379 Firmware Version -
   Qualcomm ≫ Qca9379 Version -
Qualcomm ≫ Sd 210 Firmware Version -
   Qualcomm ≫ Sd 210 Version -
Qualcomm ≫ Sd 212 Firmware Version -
   Qualcomm ≫ Sd 212 Version -
Qualcomm ≫ Sd 205 Firmware Version -
   Qualcomm ≫ Sd 205 Version -
Qualcomm ≫ Sd 425 Firmware Version -
   Qualcomm ≫ Sd 425 Version -
Qualcomm ≫ Sd 625 Firmware Version -
   Qualcomm ≫ Sd 625 Version -
Qualcomm ≫ Sd 810 Firmware Version -
   Qualcomm ≫ Sd 810 Version -
Qualcomm ≫ Sd 820 Firmware Version -
   Qualcomm ≫ Sd 820 Version -
Qualcomm ≫ Sd 820a Firmware Version -
   Qualcomm ≫ Sd 820a Version -
Qualcomm ≫ Sd 835 Firmware Version -
   Qualcomm ≫ Sd 835 Version -
Qualcomm ≫ Sd 845 Firmware Version -
   Qualcomm ≫ Sd 845 Version -
Qualcomm ≫ Sd 850 Firmware Version -
   Qualcomm ≫ Sd 850 Version -
Qualcomm ≫ Sda660 Firmware Version -
   Qualcomm ≫ Sda660 Version -
Qualcomm ≫ Sdx20 Firmware Version -
   Qualcomm ≫ Sdx20 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.24% 0.148
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

https://www.qualcomm.com/company/product-security/bulletins
Vendor Advisory
http://www.securityfocus.com/bid/107681
Third Party Advisory
VDB Entry