CVE-2018-11935 — MEDIUM (5.3)

Vulnerability Description

Improper input validation might result in incorrect app id returned to the caller Instead of returning failure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in versions MDM9607, MDM9650, MDM9655, MSM8996AU, QCS605, SD 210/SD 212/SD 205, SD 410/12, SD 615/16/SD 415, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 8CX, SDA660, SDM630, SDM660, SXR1130.

CVSS Score

5.3

MEDIUM

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

LOW

Integrity

NONE

Availability

NONE

Affected Products

Vendor	Product	Versions
Qualcomm	Mdm9607 Firmware	-
Qualcomm	Mdm9607	-
Qualcomm	Mdm9650 Firmware	-
Qualcomm	Mdm9650	-
Qualcomm	Mdm9655 Firmware	-
Qualcomm	Mdm9655	-
Qualcomm	Msm8996Au Firmware	-
Qualcomm	Msm8996Au	-
Qualcomm	Qcs605 Firmware	-
Qualcomm	Qcs605	-
Qualcomm	Sd 210 Firmware	-
Qualcomm	Sd 210	-
Qualcomm	Sd 212 Firmware	-
Qualcomm	Sd 212	-
Qualcomm	Sd 205 Firmware	-
Qualcomm	Sd 205	-
Qualcomm	Sd 410 Firmware	-
Qualcomm	Sd 410	-
Qualcomm	Sd 12 Firmware	-
Qualcomm	Sd 12	-

Related Weaknesses (CWE)

CWE-20

References

http://www.securityfocus.com/bid/106845Third Party AdvisoryVDB Entry
https://www.qualcomm.com/company/product-security/bulletinsVendor Advisory
http://www.securityfocus.com/bid/106845Third Party AdvisoryVDB Entry
https://www.qualcomm.com/company/product-security/bulletinsVendor Advisory

FAQ

What is CVE-2018-11935?

CVE-2018-11935 is a vulnerability with a CVSS score of 5.3 (MEDIUM). Improper input validation might result in incorrect app id returned to the caller Instead of returning failure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Elec...

How severe is CVE-2018-11935?

CVE-2018-11935 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2018-11935?

Check the references section above for vendor advisories and patch information. Affected products include: Qualcomm Mdm9607 Firmware, Qualcomm Mdm9607, Qualcomm Mdm9650 Firmware, Qualcomm Mdm9650, Qualcomm Mdm9655 Firmware.