CVE-2018-11292: Integer Overflow
In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCA6574AU, QCA6584, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820A, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, SnapdragonHighMed2016, lack of input validation in WLANWMI command handlers can lead to integer & heap overflows.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-11292?
CVE-2018-11292 is a vulnerability in Snapdragon (Automobile, Mobile, Wear) devices.
How severe is CVE-2018-11292?
CVE-2018-11292 has a severity rating of 7.8 (high).
Which products are affected by CVE-2018-11292?
Qualcomm MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCA6574AU, QCA6584, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820A, SDM429, SDM439, SDM630, SDM632, SDM636, and SDM660 are affected by CVE-2018-11292.
How can I fix CVE-2018-11292?
Apply the security patches provided by the device manufacturer or software vendor.
Where can I find more information about CVE-2018-11292?
You can find more information about CVE-2018-11292 at the following references: [Link 1](https://source.android.com/docs/security/bulletin/2018-09-01/#asterisk), [Link 2](https://source.android.com/docs/security/bulletin/2018-09-01), [Link 3](http://support.blackberry.com/kb/articleDetail?language=en_US&articleNumber=000051618).