CVE-2018-11899: Out-of-bounds Read
While processing radio connection status change events, Radio index is not properly validated in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile and Snapdragon Voice & Music in versions MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-11899?
CVE-2018-11899 is a vulnerability that affects Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile and Snapdragon Voice & Music in versions MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, SD.
What is the severity of CVE-2018-11899?
The severity of CVE-2018-11899 is high with a CVSS score of 7.8.
Which software versions are affected by CVE-2018-11899?
CVE-2018-11899 affects software versions MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, SD.
How does CVE-2018-11899 impact Snapdragon products?
CVE-2018-11899 can allow an attacker to exploit vulnerabilities in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile and Snapdragon Voice & Music.
Is there a fix available for CVE-2018-11899?
To mitigate the vulnerability, it is recommended to apply the necessary patches and updates provided by Qualcomm.