CVE-2018-11838: Double Free

Published Mar 2, 2020

Updated

Possible double free issue in WLAN due to lack of checking memory free condition. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8053, MDM9640, SDA660, SDM636, SDM660, SDX20

Affected Software

13 affected components

Google Android

Qualcomm Apq8053 Firmware

Qualcomm Apq8053

Qualcomm Mdm9640 Firmware

Qualcomm MDM9640

Qualcomm Sda660 Firmware

Qualcomm SDA660

Qualcomm Sdm636 Firmware

Qualcomm SDM636

Qualcomm Sdm660 Firmware

Qualcomm SDM660

Qualcomm Sdx20 Firmware

Qualcomm SDX20

Remediation

Patch Available

https://www.qualcomm.com/company/product-security/bulletins/march-2020-bulletin

Event History

Mar 2, 2020

CVE Published

via Android·12:00 AM

Data Sourced

via Android·12:00 AM

SeverityAffected Software

Mar 5, 2020

CVE Published

via MITRE·08:56 AM

Data Sourced

via MITRE·08:56 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-11838?

CVE-2018-11838 is considered a high-severity vulnerability due to the potential for a double free condition.

How do I fix CVE-2018-11838?

To fix CVE-2018-11838, it is recommended to apply the latest security patches provided by Qualcomm for the affected firmware.

What devices are affected by CVE-2018-11838?

CVE-2018-11838 affects devices using Qualcomm chipsets such as APQ8053, MDM9640, SDA660, SDM636, and others.

What impact does CVE-2018-11838 have on systems?

CVE-2018-11838 may lead to system crashes or unauthorized access due to incorrect memory handling.

Is CVE-2018-11838 related to wireless connectivity?

Yes, CVE-2018-11838 is associated with wireless LAN functionality in Qualcomm chipsets.