// For flags

CVE-2018-11850

 

Severity Score

7.8
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Lack of check on remaining length parameter When processing scan start command will lead to buffer flow in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6174A, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9379, SD 210/SD 212/SD 205, SD 425, SD 625, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDX20

La falta de comprobaciones del comando length sobrante al procesar el comando scan start conducirá al flujo del búfer en Snapdragon Automobile, Snapdragon Mobile y Snapdragon Wear en versiones MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6174A, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9379, SD 210/SD 212/SD 205, SD 425, SD 625, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660 y SDX20.

*Credits: N/A
CVSS Scores
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Local
Attack Complexity
Low
Authentication
None
Confidentiality
Complete
Integrity
Complete
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2018-06-07 CVE Reserved
  • 2018-10-26 CVE Published
  • 2023-03-08 EPSS Updated
  • 2024-08-05 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Qualcomm
Search vendor "Qualcomm"
Mdm9206 Firmware
Search vendor "Qualcomm" for product "Mdm9206 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Mdm9206
Search vendor "Qualcomm" for product "Mdm9206"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Mdm9607 Firmware
Search vendor "Qualcomm" for product "Mdm9607 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Mdm9607
Search vendor "Qualcomm" for product "Mdm9607"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Mdm9640 Firmware
Search vendor "Qualcomm" for product "Mdm9640 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Mdm9640
Search vendor "Qualcomm" for product "Mdm9640"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Mdm9650 Firmware
Search vendor "Qualcomm" for product "Mdm9650 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Mdm9650
Search vendor "Qualcomm" for product "Mdm9650"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Msm8996au Firmware
Search vendor "Qualcomm" for product "Msm8996au Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Msm8996au
Search vendor "Qualcomm" for product "Msm8996au"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Qca6174a Firmware
Search vendor "Qualcomm" for product "Qca6174a Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Qca6174a
Search vendor "Qualcomm" for product "Qca6174a"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Qca6574au Firmware
Search vendor "Qualcomm" for product "Qca6574au Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Qca6574au
Search vendor "Qualcomm" for product "Qca6574au"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Qca6584 Firmware
Search vendor "Qualcomm" for product "Qca6584 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Qca6584
Search vendor "Qualcomm" for product "Qca6584"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Qca6584au Firmware
Search vendor "Qualcomm" for product "Qca6584au Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Qca6584au
Search vendor "Qualcomm" for product "Qca6584au"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Qca9377 Firmware
Search vendor "Qualcomm" for product "Qca9377 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Qca9377
Search vendor "Qualcomm" for product "Qca9377"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Qca9379 Firmware
Search vendor "Qualcomm" for product "Qca9379 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Qca9379
Search vendor "Qualcomm" for product "Qca9379"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 210 Firmware
Search vendor "Qualcomm" for product "Sd 210 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 210
Search vendor "Qualcomm" for product "Sd 210"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 212 Firmware
Search vendor "Qualcomm" for product "Sd 212 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 212
Search vendor "Qualcomm" for product "Sd 212"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 205 Firmware
Search vendor "Qualcomm" for product "Sd 205 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 205
Search vendor "Qualcomm" for product "Sd 205"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 425 Firmware
Search vendor "Qualcomm" for product "Sd 425 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 425
Search vendor "Qualcomm" for product "Sd 425"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 625 Firmware
Search vendor "Qualcomm" for product "Sd 625 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 625
Search vendor "Qualcomm" for product "Sd 625"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 810 Firmware
Search vendor "Qualcomm" for product "Sd 810 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 810
Search vendor "Qualcomm" for product "Sd 810"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 820 Firmware
Search vendor "Qualcomm" for product "Sd 820 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 820
Search vendor "Qualcomm" for product "Sd 820"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 820a Firmware
Search vendor "Qualcomm" for product "Sd 820a Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 820a
Search vendor "Qualcomm" for product "Sd 820a"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 835 Firmware
Search vendor "Qualcomm" for product "Sd 835 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 835
Search vendor "Qualcomm" for product "Sd 835"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 845 Firmware
Search vendor "Qualcomm" for product "Sd 845 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 845
Search vendor "Qualcomm" for product "Sd 845"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 850 Firmware
Search vendor "Qualcomm" for product "Sd 850 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 850
Search vendor "Qualcomm" for product "Sd 850"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sda660 Firmware
Search vendor "Qualcomm" for product "Sda660 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sda660
Search vendor "Qualcomm" for product "Sda660"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sdx20 Firmware
Search vendor "Qualcomm" for product "Sdx20 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sdx20
Search vendor "Qualcomm" for product "Sdx20"
--
Safe