CVE-2018-11924: Integer Overflow
Improper buffer length validation in WLAN function can lead to a potential integer oveflow issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCS605, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM630, SDM660, SDX20, SDX24, SM7150
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2018-11924?
CVE-2018-11924 has been assigned a high severity level due to the potential for integer overflow vulnerabilities.
How do I fix CVE-2018-11924?
To fix CVE-2018-11924, it is recommended to update to the latest firmware or software version provided by Qualcomm.
Which devices are affected by CVE-2018-11924?
CVE-2018-11924 affects several Qualcomm Snapdragon devices including MDM9150, MDM9206, and others across various categories.
What types of attacks could exploit CVE-2018-11924?
Exploitation of CVE-2018-11924 may allow attackers to execute arbitrary code or cause denial of service conditions.
How can I determine if my device is vulnerable to CVE-2018-11924?
You can determine vulnerability to CVE-2018-11924 by checking the specific Qualcomm firmware version against the affected models listed in the vulnerability advisory.