PT-2018-10851 · Qualcomm · Snapdragon

Publicado 2018-10-26 · Atualizado 2019-04-25 · CVE-2018-11850

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6174A, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9379, SD 210/SD 212/SD 205, SD 425, SD 625, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDX20

Description The issue is related to a lack of check on the remaining length parameter when processing a scan start command, which can lead to a buffer overflow. This affects various Qualcomm Snapdragon products, including those for automobile, mobile, and wear applications.

Recommendations For versions MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6174A, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9379, SD 210/SD 212/SD 205, SD 425, SD 625, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDX20, at the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2018-11850

Produtos afetados

Snapdragon

Referências · 3

• http://securityfocus.com/bid/107681 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-11850 · Nota de Segurança
• https://qualcomm.com/company/product-security/bulletins · Aviso do Fabricante