CVE-2018-11872

Improper input validation leads to buffer overwrite in the WLAN function that handles WMI commands in Snapdragon Mobile in version SD 845, SD 850, SDA660

Score

CVSS 3.0 7.8 High

Status

Modified - product-security@qualcomm.com

Published

2018-10-29

Last modified

2024-08-05

Weaknesses

CWE-20

Affected products

• Sd 845 Firmware (Qualcomm)
• Sd 850 Firmware (Qualcomm)
• Sda660 Firmware (Qualcomm)
• Snapdragon Mobile (Qualcomm Inc.)

References

• http://www.securityfocus.com/bid/107681
• https://www.qualcomm.com/company/product-security/bulletins