PT-2019-8859 · Qualcomm · Snapdragon Wear

Published 2019-01-18 · Updated 2019-01-23 · CVE-2018-11993

Positive Technologies (AI Summary)

CVSS v2.0

8.3

High

Base vector

AV:A/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions snapdragon wear versions MDM9206, MDM9607

Description The issue is related to an improper check while accessing the local memory stack on MQTT connection requests, which can lead to a buffer overflow.

Recommendations For snapdragon wear versions MDM9206 and MDM9607, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2018-11993

Affected Products

Snapdragon Wear

References · 2

• https://qualcomm.com/company/product-security/bulletins · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-11993 · Security Note