CVE-2018-11858: Buffer Overflow
Published Sep 4, 2018
·Updated
When processing IE set command, buffer overwrite may occur due to lack of input validation of the IE length in Snapdragon Mobile in version SD 835, SD 845, SD 850.
Affected Software
7 affected components
Google Android
QUALCOMM Sd 835 Firmware
QUALCOMM SD 835
QUALCOMM Sd 845 Firmware
QUALCOMM SD 845
QUALCOMM Sd 850 Firmware
QUALCOMM SD 850
Event History
Sep 4, 2018
CVE Published
via Android·12:00 AM
Data Sourced
via Android·12:00 AM
SeverityAffected Software
Oct 29, 2018
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2018-11858?
CVE-2018-11858 is a critical vulnerability due to potential buffer overwrite in Qualcomm Snapdragon mobile devices.
2
How do I fix CVE-2018-11858?
To fix CVE-2018-11858, update the firmware of Qualcomm Snapdragon 835, 845, or 850 to the latest version provided by Qualcomm.
3
Which devices are affected by CVE-2018-11858?
CVE-2018-11858 affects devices using Qualcomm Snapdragon 835, 845, and 850 firmware.
4
What type of vulnerability is CVE-2018-11858?
CVE-2018-11858 is a buffer overwrite vulnerability caused by inadequate input validation.
5
Is CVE-2018-11858 present in all Qualcomm Snapdragon devices?
No, CVE-2018-11858 specifically affects Qualcomm Snapdragon 835, 845, and 850, not all Snapdragon devices.