CVE-2018-11929

HIGH

Qualcomm Snapdragon Firmware - Heap Overflow via WLAN Function Input Validation

Title source: llm

Description

Lack of input validation in WLAN function can lead to potential heap overflow in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCS405, QCS605, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDM630, SDM660, SDX20, SDX24

References (1)

Core 1

Core References

Patch, Third Party Advisory x_refsource_confirm

https://www.codeaurora.org/security-bulletin/2019/05/06/may-2019-code-aurora-security-bulletin

Scores

CVSS v3 7.8

EPSS 0.0004

EPSS Percentile 14.0%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-787

Status published

Products (29)

qualcomm/mdm9150_firmware

qualcomm/mdm9206_firmware

qualcomm/mdm9607_firmware

qualcomm/mdm9640_firmware

qualcomm/mdm9650_firmware

qualcomm/msm8996au_firmware

qualcomm/qcs405_firmware

qualcomm/qcs605_firmware

qualcomm/sd_425_firmware

qualcomm/sd_427_firmware

... and 19 more

Published Jun 14, 2019

Tracked Since Feb 18, 2026