CVE Feed

    Dashboard / CVE / CVE-2018-11879

    CVE-2018-11879

    When the buffer length passed is very large, bounds check could be bypassed leading to potential buffer overwrite in Snapdragon Mobile in version SD 845

    Published:Oct 29, 2018
    Last Modified:Nov 21, 2024
    EPS:Oct 29, 2018
    EPSS Score:0.00033
    CVSS Score:7.8

    Affected Products

    Vendor
    Qualcomm
    Product
    Sd 845
    Vendor
    Qualcomm
    Product
    Sd 845 Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-190 Integer Overflow or Wraparound

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-92 Forced Integer Overflow

    Related CVEs

    CVE-2018-5852 (CVSS 8.4) — An unsigned integer underflow vulnerability in IPA driver result into a buffer over-read while reading NAT ent…
    CVE-2017-18307 (CVSS 8.4) — Information disclosure possible while audio playback.…
    CVE-2017-18306 (CVSS 8.4) — Information disclosure due to uninitialized variable.…
    CVE-2018-11952 (CVSS 8.4) — An image with a version lower than the fuse version may potentially be booted lead to improper authentication.…
    CVE-2018-11922 (CVSS 9.8) — Wrong configuration in Touch Pal application can collect user behavior data without awareness by the user.…
    CVE-2017-17772 (CVSS 9.8) — In multiple functions that process 802.11 frames, out-of-bounds reads can occur due to insufficient validation…
    CVE-2017-15832 (CVSS 8.4) — Buffer overwrite in the WLAN host driver by leveraging a compromised WLAN FW…
    CVE-2017-11076 (CVSS 9.8) — On some hardware revisions where VP9 decoding is hardware-accelerated, the frame size is not programmed correc…
    CVE-2016-10394 (CVSS 8.4) — Initial xbl_sec revision does not have all the debug policy features and critical checks.…
    CVE-2017-9711 (CVSS 6.7) — Certain unprivileged processes are able to perform IOCTL calls.…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High