PT-2019-8859 · Qualcomm · Snapdragon Wear

Publicado 2019-01-18 · Atualizado 2019-01-23 · CVE-2018-11993

Positive Technologies (AI Summary)

CVSS v2.0

8.3

Alta

Vetor base

AV:A/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions snapdragon wear versions MDM9206, MDM9607

Description The issue is related to an improper check while accessing the local memory stack on MQTT connection requests, which can lead to a buffer overflow.

Recommendations For snapdragon wear versions MDM9206 and MDM9607, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

CVE-2018-11993

Produtos afetados

Snapdragon Wear

Referências · 2

• https://qualcomm.com/company/product-security/bulletins · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-11993 · Nota de Segurança