CVE-2018-11828: High severity android vulnerability

Published Oct 26, 2018

Updated

When FW tries to get random mac address generated from new SW RNG and ADC values read are constant then DUT get struck in loop while trying to get random ADC samples in Snapdragon Mobile in version SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52

Affected Software

19 affected components

Google Android

Qualcomm Sd 210 Firmware

Qualcomm SD 210

Qualcomm Sd 212 Firmware

Qualcomm SD 212

Qualcomm Sd 205 Firmware

Qualcomm SD 205

Qualcomm Sd 425 Firmware

Qualcomm SD 425

Qualcomm Sd 430 Firmware

Qualcomm SD 430

Qualcomm Sd 450 Firmware

Qualcomm SD 450

Qualcomm Sd 625 Firmware

Qualcomm SD 625

Qualcomm Sd 650 Firmware

Qualcomm SD 650

Qualcomm Sd 652 Firmware

Qualcomm Sd 652

Event History

Oct 26, 2018

CVE Published

via MITRE·01:00 PM

Data Sourced

via MITRE·01:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-11828?

The severity of CVE-2018-11828 is classified as high due to potential denial of service conditions.

How do I fix CVE-2018-11828?

To fix CVE-2018-11828, update the affected Qualcomm hardware firmware to a patched version as provided by the manufacturer.

Which devices are affected by CVE-2018-11828?

CVE-2018-11828 affects Snapdragon Mobile chipsets including SD 210, SD 212, SD 205, SD 425, SD 430, SD 450, SD 625, SD 650, and SD 652.

What is the impact of CVE-2018-11828?

The impact of CVE-2018-11828 is that it may cause devices to become unresponsive, resulting in potential denial of service.

Is there a workaround for CVE-2018-11828?

Currently, the recommended approach is to apply firmware updates from Qualcomm as there are no known effective workarounds for CVE-2018-11828.