CVE-2018-11948

MEDIUM

Snapdragon Auto <various - Info Disclosure

Title source: llm
STIX 2.1

Description

Exceeding the limit of usage entries are not tracked and the information will be lost causing the content to lose continuity in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in versions MSM8996AU, QCS605, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/106845

Scores

CVSS v3 5.5
EPSS 0.0006
EPSS Percentile 17.5%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Details

CWE
CWE-129
Status published
Products (30)
qualcomm/msm8996au_firmware
qualcomm/qcs605_firmware
qualcomm/sd_410_firmware
qualcomm/sd_412_firmware
qualcomm/sd_425_firmware
qualcomm/sd_427_firmware
qualcomm/sd_429_firmware
qualcomm/sd_430_firmware
qualcomm/sd_435_firmware
qualcomm/sd_439_firmware
... and 20 more
Published Feb 25, 2019
Tracked Since Feb 18, 2026