Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2018-11870

Buffer overwrite can occur when the legacy rates count received from the host is not checked against the maximum number of legacy rates in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MSM8996AU, QCA4531, QCA6174A, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9378, QCA9379, SD 210/SD 212/SD 205, SD 425, SD 600, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDX20.

Published

2018-10-29T18:29:03.307

Last Modified

2024-11-21T03:44:10.477

Status

Modified

Source

[email protected]

Severity

CVSSv3.0: 7.8 (HIGH)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

3.9

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-119
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System qualcomm mdm9206_firmware - Yes
Hardware qualcomm mdm9206 - No
Operating System qualcomm mdm9607_firmware - Yes
Hardware qualcomm mdm9607 - No
Operating System qualcomm mdm9635m_firmware - Yes
Hardware qualcomm mdm9635m - No
Operating System qualcomm mdm9640_firmware - Yes
Hardware qualcomm mdm9640 - No
Operating System qualcomm mdm9650_firmware - Yes
Hardware qualcomm mdm9650 - No
Operating System qualcomm msm8996au_firmware - Yes
Hardware qualcomm msm8996au - No
Operating System qualcomm qca4531_firmware - Yes
Hardware qualcomm qca4531 - No
Operating System qualcomm qca6174a_firmware - Yes
Hardware qualcomm qca6174a - No
Operating System qualcomm qca6574au_firmware - Yes
Hardware qualcomm qca6574au - No
Operating System qualcomm qca6584_firmware - Yes
Hardware qualcomm qca6584 - No
Operating System qualcomm qca6584au_firmware - Yes
Hardware qualcomm qca6584au - No
Operating System qualcomm qca9377_firmware - Yes
Hardware qualcomm qca9377 - No
Operating System qualcomm qca9378_firmware - Yes
Hardware qualcomm qca9378 - No
Operating System qualcomm qca9379_firmware - Yes
Hardware qualcomm qca9379 - No
Operating System qualcomm sd_210_firmware - Yes
Hardware qualcomm sd_210 - No
Operating System qualcomm sd_212_firmware - Yes
Hardware qualcomm sd_212 - No
Operating System qualcomm sd_205_firmware - Yes
Hardware qualcomm sd_205 - No
Operating System qualcomm sd_425_firmware - Yes
Hardware qualcomm sd_425 - No
Operating System qualcomm sd_600_firmware - Yes
Hardware qualcomm sd_600 - No
Operating System qualcomm sd_625_firmware - Yes
Hardware qualcomm sd_625 - No
Operating System qualcomm sd_650_firmware - Yes
Hardware qualcomm sd_650 - No
Operating System qualcomm sd_652_firmware - Yes
Hardware qualcomm sd_652 - No
Operating System qualcomm sd_810_firmware - Yes
Hardware qualcomm sd_810 - No
Operating System qualcomm sd_820_firmware - Yes
Hardware qualcomm sd_820 - No
Operating System qualcomm sd_820a_firmware - Yes
Hardware qualcomm sd_820a - No
Operating System qualcomm sd_835_firmware - Yes
Hardware qualcomm sd_835 - No
Operating System qualcomm sd_845_firmware - Yes
Hardware qualcomm sd_845 - No
Operating System qualcomm sd_850_firmware - Yes
Hardware qualcomm sd_850 - No
Operating System qualcomm sda660_firmware - Yes
Hardware qualcomm sda660 - No
Operating System qualcomm sdx20_firmware - Yes
Hardware qualcomm sdx20 - No
References