CVE-2018-11858: Buffer Overflow
First published: Tue Sep 04 2018(Updated: )
When processing IE set command, buffer overwrite may occur due to lack of input validation of the IE length in Snapdragon Mobile in version SD 835, SD 845, SD 850.
Credit: product-security@qualcomm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Android | ||
| Qualcomm SD835 Firmware | ||
| Qualcomm Snapdragon 835 | ||
| Qualcomm SDA845 Firmware | ||
| Qualcomm SD845 | ||
| Qualcomm SD850 Firmware | ||
| Qualcomm SD850 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2018-11858?
CVE-2018-11858 is a critical vulnerability due to potential buffer overwrite in Qualcomm Snapdragon mobile devices.
How do I fix CVE-2018-11858?
To fix CVE-2018-11858, update the firmware of Qualcomm Snapdragon 835, 845, or 850 to the latest version provided by Qualcomm.
Which devices are affected by CVE-2018-11858?
CVE-2018-11858 affects devices using Qualcomm Snapdragon 835, 845, and 850 firmware.
What type of vulnerability is CVE-2018-11858?
CVE-2018-11858 is a buffer overwrite vulnerability caused by inadequate input validation.
Is CVE-2018-11858 present in all Qualcomm Snapdragon devices?
No, CVE-2018-11858 specifically affects Qualcomm Snapdragon 835, 845, and 850, not all Snapdragon devices.
- agent/weakness
- agent/type
- agent/first-publish-date
- agent/references
- agent/author
- agent/severity
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/event
- agent/last-modified-date
- agent/source
- agent/tags
- agent/softwarecombine
- collector/android-source
- source/Android
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/google
- canonical/android
- vendor/qualcomm
- canonical/qualcomm sd835 firmware
- canonical/qualcomm snapdragon 835
- canonical/qualcomm sda845 firmware
- canonical/qualcomm sd845
- canonical/qualcomm sd850 firmware
- canonical/qualcomm sd850