CVE-2018-11292

HIGH

Qualcomm Snapdragon Firmware - Integer Overflow and Heap Overflow via WLANWMI Command Handler

Title source: llm

Description

In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCA6574AU, QCA6584, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820A, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, Snapdragon_High_Med_2016, lack of input validation in WLANWMI command handlers can lead to integer & heap overflows.

References (3)

Core 3

Core References

Third Party Advisory x_refsource_confirm

https://source.android.com/security/bulletin/2018-09-01#qualcomm-closed-source-components

Vendor Advisory x_refsource_confirm

https://www.qualcomm.com/company/product-security/bulletins

Third Party Advisory x_refsource_confirm

http://support.blackberry.com/kb/articleDetail?language=en_US&articleNumber=000051618

Scores

CVSS v3 7.8

EPSS 0.0013

EPSS Percentile 31.7%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-190 CWE-787

Status published

Products (30)

qualcomm/mdm9206_firmware

qualcomm/mdm9607_firmware

qualcomm/mdm9640_firmware

qualcomm/mdm9650_firmware

qualcomm/msm8909w_firmware

qualcomm/msm8996au_firmware

qualcomm/qca6574au_firmware

qualcomm/qca6584_firmware

qualcomm/sd205_firmware

qualcomm/sd210_firmware

... and 20 more

Published Sep 20, 2018

Tracked Since Feb 18, 2026