CVE-2018-11271: Critical severity Google Android vulnerability
Improper authentication can happen on Remote command handling due to inappropriate handling of events in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Wearables in MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SM7150, SnapdragonHighMed2016, SXR1130
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-11271?
CVE-2018-11271 has a severity rating of High due to the potential for improper authentication leading to unauthorized access.
How do I fix CVE-2018-11271?
To fix CVE-2018-11271, users should update their affected devices to the latest firmware versions provided by Qualcomm and software updates from device manufacturers.
Which devices are affected by CVE-2018-11271?
Devices affected by CVE-2018-11271 include models using Qualcomm Snapdragon platforms, such as mobile and IoT devices.
What vulnerabilities are associated with CVE-2018-11271?
CVE-2018-11271 is associated with improper handling of events that can lead to unauthorized remote command execution.
Is there a public exploit for CVE-2018-11271?
As of now, there are no known public exploits for CVE-2018-11271, but it is advised to apply patches and updates promptly.