CVE Feed

    Dashboard / CVE / CVE-2018-11922

    CVE-2018-11922

    Wrong configuration in Touch Pal application can collect user behavior data without awareness by the user.

    Published:Nov 26, 2024
    Last Modified:Jan 9, 2025
    EPS:Nov 26, 2024
    EPSS Score:0.00075
    CVSS Score:7.5

    Affected Products

    Vendor
    Qualcomm
    Product
    215
    Vendor
    Qualcomm
    Product
    215 Firmware
    Vendor
    Qualcomm
    Product
    Mdm9206
    Vendor
    Qualcomm
    Product
    Mdm9206 Firmware
    Vendor
    Qualcomm
    Product
    Mdm9607
    Vendor
    Qualcomm
    Product
    Mdm9607 Firmware
    Vendor
    Qualcomm
    Product
    Mdm9640
    Vendor
    Qualcomm
    Product
    Mdm9640 Firmware
    Vendor
    Qualcomm
    Product
    Mdm9650
    Vendor
    Qualcomm
    Product
    Mdm9650 Firmware
    Vendor
    Qualcomm
    Product
    Sd 205
    Vendor
    Qualcomm
    Product
    Sd 205 Firmware
    Vendor
    Qualcomm
    Product
    Sd 210
    Vendor
    Qualcomm
    Product
    Sd 210 Firmware
    Vendor
    Qualcomm
    Product
    Sd 212
    Vendor
    Qualcomm
    Product
    Sd 212 Firmware
    Vendor
    Qualcomm
    Product
    Sd 425
    Vendor
    Qualcomm
    Product
    Sd 425 Firmware
    Vendor
    Qualcomm
    Product
    Sd 427
    Vendor
    Qualcomm
    Product
    Sd 427 Firmware
    Vendor
    Qualcomm
    Product
    Sd 429
    Vendor
    Qualcomm
    Product
    Sd 429 Firmware
    Vendor
    Qualcomm
    Product
    Sd 430
    Vendor
    Qualcomm
    Product
    Sd 430 Firmware
    Vendor
    Qualcomm
    Product
    Sd 435
    Vendor
    Qualcomm
    Product
    Sd 435 Firmware
    Vendor
    Qualcomm
    Product
    Sd 439
    Vendor
    Qualcomm
    Product
    Sd 439 Firmware
    Vendor
    Qualcomm
    Product
    Sd 450
    Vendor
    Qualcomm
    Product
    Sd 450 Firmware
    Vendor
    Qualcomm
    Product
    Sd 625
    Vendor
    Qualcomm
    Product
    Sd 625 Firmware
    Vendor
    Qualcomm
    Product
    Sd 632
    Vendor
    Qualcomm
    Product
    Sd 632 Firmware
    Vendor
    Qualcomm
    Product
    Sd 845
    Vendor
    Qualcomm
    Product
    Sd 845 Firmware
    Vendor
    Qualcomm
    Product
    Sd 850
    Vendor
    Qualcomm
    Product
    Sd 850 Firmware
    Vendor
    Qualcomm
    Product
    Sda660
    Vendor
    Qualcomm
    Product
    Sda660 Firmware
    Vendor
    Qualcomm
    Product
    Sdm439
    Vendor
    Qualcomm
    Product
    Sdm439 Firmware
    Vendor
    Qualcomm
    Product
    Sdx20
    Vendor
    Qualcomm
    Product
    Sdx20 Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2025-21424 (CVSS 7.8) — Memory corruption while calling the NPU driver APIs concurrently.…
    CVE-2024-53014 (CVSS 7.8) — Memory corruption may occur while validating ports and channels in Audio driver.…
    CVE-2024-38426 (CVSS 5.4) — While processing the authentication message in UE, improper authentication may lead to information disclosure.…
    CVE-2024-33042 (CVSS 7.8) — Memory corruption when Alternative Frequency offset value is set to 255.…
    CVE-2023-33020 (CVSS 7.5) — Transient DOS in WLAN Host when an invalid channel (like channel out of range) is received in STA during CSA I…
    CVE-2023-33019 (CVSS 7.5) — Transient DOS in WLAN Host while doing channel switch announcement (CSA), when a mobile station receives inval…
    CVE-2023-28575 (CVSS 6.7) — The cam_get_device_priv function does not check the type of handle being returned (device/session/link). This …
    CVE-2023-24854 (CVSS 7.8) — Memory Corruption in WLAN HOST while parsing QMI WLAN Firmware response message.…
    CVE-2023-22667 (CVSS 8.4) — Memory Corruption in Audio while allocating the ion buffer during the music playback.…
    CVE-2023-22387 (CVSS 7.8) — Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption.…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High