CVE-2018-11927: Out-of-bounds Read
Improper input validation on input which is used as an array index will lead to an out of bounds issue while processing AP find event from firmware in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, SD 210/SD 212/SD 205, SD 625, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 845 / SD 850, SD 855, SDX20, SDX24, SM7150
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2018-11927?
CVE-2018-11927 has a severity rating of high due to the potential for an out of bounds access vulnerability.
How do I fix CVE-2018-11927?
To fix CVE-2018-11927, update to the latest firmware provided by Qualcomm.
What systems are affected by CVE-2018-11927?
CVE-2018-11927 affects several Qualcomm products including MDM9150, MDM9206, and various Snapdragon firmware versions.
Can CVE-2018-11927 be exploited remotely?
Yes, CVE-2018-11927 could potentially be exploited remotely through specific AP find events.
What are the consequences of CVE-2018-11927 exploitation?
Successful exploitation of CVE-2018-11927 could lead to system crashes or unauthorized access due to out of bounds memory access.