1. Home
  2. CVE Database
  3. CVE-2018-13914
HIGH · 7.8

CVE-2018-13914

Lack of input validation for data received from user space can lead to an out of bound array issue in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon...

Vulnerability Description

Lack of input validation for data received from user space can lead to an out of bound array issue in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in version MDM9150, MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 636, SD 820A, SD 835, SDM630, SDM660, SDX20.

CVSS Score

7.8

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
QualcommSnapdragon Auto Firmware-
QualcommSnapdragon Auto-
QualcommSnapdragon Consumer Internet Of Things Firmware-
QualcommSnapdragon Consumer Internet Of Things-
QualcommSnapdragon Industrial Internet Of Things Firmware-
QualcommSnapdragon Industrial Internet Of Things-
QualcommMdm9150 Firmware-
QualcommMdm9150-
QualcommMdm9206 Firmware-
QualcommMdm9206-
QualcommMdm9607 Firmware-
QualcommMdm9607-
QualcommMdm9650 Firmware-
QualcommMdm9650-
QualcommMsm8909W Firmware-
QualcommMsm8909W-
QualcommMsm8996Au Firmware-
QualcommMsm8996Au-
QualcommSd 210 Firmware-
QualcommSd 210-

Related Weaknesses (CWE)

CWE-119

References

FAQ

What is CVE-2018-13914?

CVE-2018-13914 is a vulnerability with a CVSS score of 7.8 (HIGH). Lack of input validation for data received from user space can lead to an out of bound array issue in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon...

How severe is CVE-2018-13914?

CVE-2018-13914 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2018-13914?

Check the references section above for vendor advisories and patch information. Affected products include: Qualcomm Snapdragon Auto Firmware, Qualcomm Snapdragon Auto, Qualcomm Snapdragon Consumer Internet Of Things Firmware, Qualcomm Snapdragon Consumer Internet Of Things, Qualcomm Snapdragon Industrial Internet Of Things Firmware.