PT-2019-8830 · Qualcomm · Snapdragon

Published 2019-05-24 · Updated 2019-05-29 · CVE-2018-11937

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions (affected versions not specified)

Description The issue is related to a lack of input validation before copying, which can lead to a buffer over read in the WLAN function. This affects various Qualcomm Snapdragon products, including Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, and Snapdragon Mobile, in a range of chipsets.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2018-11937

Affected Products

Snapdragon

References · 2

• https://codeaurora.org/security-bulletin/2019/04/01/april-2019-code-aurora-security-bulletin · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2018-11937 · Security Note