CVE-2018-13887

CRITICAL

Qualcomm MDM9150 and related firmware - Integer Overflow in GNSS XTRA3 Header Parsing

Title source: llm
STIX 2.1

Description

Untrusted header fields in GNSS XTRA3 function can lead to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9635M, MDM9650, MDM9655, MSM8909W, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 600, SD 625, SD 632, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 835, SD 845 / SD 850, SDA660, SDM439, SDM630, SDM660, SDX20, SM7150, SXR1130

References (1)

Core 1
Core References

Scores

CVSS v3 9.8
EPSS 0.0033
EPSS Percentile 56.1%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-190
Status published
Products (37)
qualcomm/mdm9150_firmware
qualcomm/mdm9206_firmware
qualcomm/mdm9607_firmware
qualcomm/mdm9635m_firmware
qualcomm/mdm9650_firmware
qualcomm/mdm9655_firmware
qualcomm/msm8909w_firmware
qualcomm/qcs605_firmware
qualcomm/qm215_firmware
qualcomm/sd_205_firmware
... and 27 more
Published May 24, 2019
Tracked Since Feb 18, 2026