CVSS: 7.8EPSS: 0%CPEs: 8EXPL: 0CVE-2018-11877
https://notcve.org/view.php?id=CVE-2018-11877
When the buffer length passed is very large in WLAN, bounds check could be bypassed leading to potential buffer overwrite in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660. Cuando el tamaño del búfer que se pasa es muy grande en WLAN, se podría omitir la comprobación de límites, lo que conduce a una potencial sobrescritura de búfer en Snapdragon Mobile en versiones SD 835, SD 845, SD 850 y SDA660. • http://www.securityfocus.com/bid/107681 https://www.qualcomm.com/company/product-security/bulletins • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.8EPSS: 0%CPEs: 50EXPL: 0CVE-2018-11866
https://notcve.org/view.php?id=CVE-2018-11866
Integer overflow may happen in WLAN when calculating an internal structure size due to lack of validation of the input length in Snapdragon Mobile, Snapdragon Wear in version IPQ8074, MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 835, SD 845, SD 850, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, SDM710, Snapdragon_High_Med_2016. Podría ocurrir un desbordamiento de enteros en WLAN al calcular un tamaño de estructura interna debido a la falta de validación de la longitud de las entradas en Snapdragon Mobile y Snapdragon Wear en versiones IPQ8074, MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 835, SD 845, SD 850, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, SDM710 y Snapdragon_High_Med_2016. • https://www.qualcomm.com/company/product-security/bulletins • CWE-190: Integer Overflow or Wraparound •
CVSS: 7.8EPSS: 0%CPEs: 6EXPL: 0CVE-2018-11872
https://notcve.org/view.php?id=CVE-2018-11872
Improper input validation leads to buffer overwrite in the WLAN function that handles WMI commands in Snapdragon Mobile in version SD 845, SD 850, SDA660 La validación de entradas incorrecta conduce a una sobrescritura de búfer en la función WLAN que maneja los comandos WMI en Snapdragon Mobile en versiones SD 845, SD 850 y SDA660. • http://www.securityfocus.com/bid/107681 https://www.qualcomm.com/company/product-security/bulletins • CWE-20: Improper Input Validation •
CVSS: 7.8EPSS: 0%CPEs: 48EXPL: 0CVE-2018-11865
https://notcve.org/view.php?id=CVE-2018-11865
Integer overflow may happen when calculating an internal structure size due to lack of validation of the input length in Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 835, SD 845, SD 850, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, SDM710, Snapdragon_High_Med_2016. Podría ocurrir un desbordamiento de enteros al calcular un tamaño de estructura interna debido a la falta de validación de la longitud de las entradas en Snapdragon Mobile y Snapdragon Wear en versiones MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 835, SD 845, SD 850, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, SDM710 y Snapdragon_High_Med_2016. • https://www.qualcomm.com/company/product-security/bulletins • CWE-190: Integer Overflow or Wraparound •
CVSS: 7.8EPSS: 0%CPEs: 8EXPL: 0CVE-2018-11874
https://notcve.org/view.php?id=CVE-2018-11874
Buffer overflow if the length of passphrase is more than 32 when setting up secure NDP connection in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660. Desbordamiento de búfer si la longitud de la frase de contraseña es superior a 32 al establecer una conexión NDP segura en Snapdragon Mobile en versiones SD 835, SD 845, SD 850 y SDA660. • http://www.securityfocus.com/bid/107681 https://www.qualcomm.com/company/product-security/bulletins • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •