CVE-2018-11287 — CRITICAL (9.8)

Vulnerability Description

In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, SDM710, Snapdragon_High_Med_2016, incorrect control flow implementation in Video while checking buffer sufficiency.

CVSS Score

9.8

CRITICAL

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Qualcomm	Mdm9206 Firmware	-
Qualcomm	Mdm9206	-
Qualcomm	Mdm9607 Firmware	-
Qualcomm	Mdm9607	-
Qualcomm	Mdm9650 Firmware	-
Qualcomm	Mdm9650	-
Qualcomm	Msm8909W Firmware	-
Qualcomm	Msm8909W	-
Qualcomm	Msm8996Au Firmware	-
Qualcomm	Msm8996Au	-
Qualcomm	Sd210 Firmware	-
Qualcomm	Sd210	-
Qualcomm	Sd212 Firmware	-
Qualcomm	Sd212	-
Qualcomm	Sd205 Firmware	-
Qualcomm	Sd205	-
Qualcomm	Sd425 Firmware	-
Qualcomm	Sd425	-
Qualcomm	Sd427 Firmware	-
Qualcomm	Sd427	-

Related Weaknesses (CWE)

CWE-20

References

https://source.android.com/security/bulletin/2018-09-01#qualcomm-closed-source-cVendor Advisory
https://www.qualcomm.com/company/product-security/bulletinsVendor Advisory
https://source.android.com/security/bulletin/2018-09-01#qualcomm-closed-source-cVendor Advisory
https://www.qualcomm.com/company/product-security/bulletinsVendor Advisory

FAQ

What is CVE-2018-11287?

CVE-2018-11287 is a vulnerability with a CVSS score of 9.8 (CRITICAL). In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 820, SD 820A, SD...

How severe is CVE-2018-11287?

CVE-2018-11287 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2018-11287?

Check the references section above for vendor advisories and patch information. Affected products include: Qualcomm Mdm9206 Firmware, Qualcomm Mdm9206, Qualcomm Mdm9607 Firmware, Qualcomm Mdm9607, Qualcomm Mdm9650 Firmware.