CVE-2018-11932: Input Validation
First published: Mon Feb 04 2019(Updated: )
Improper input validation can lead RW access to secure subsystem from HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in versions MDM9650, MDM9655, MSM8996AU, QCS605, SD 410/12, SD 615/16/SD 415, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 8CX, SXR1130.
Credit: product-security@qualcomm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Android | ||
| Qualcomm MDM9650 | ||
| Qualcomm MDM9650 firmware | ||
| Qualcomm MDM9655 firmware | ||
| Qualcomm MDM9655 firmware | ||
| qualcomm MSM8996AU firmware | ||
| Qualcomm MSM8996AU Firmware | ||
| Qualcomm QCS605 | ||
| Qualcomm QCS605 Firmware | ||
| Qualcomm SD410 Firmware | ||
| Qualcomm Snapdragon 410 | ||
| Qualcomm SD 12 Firmware | ||
| Qualcomm SD 12 Firmware | ||
| Qualcomm SD615 Firmware | ||
| Qualcomm Snapdragon 615 | ||
| Qualcomm SD 16 Firmware | ||
| Qualcomm SD 16 Firmware | ||
| Qualcomm Snapdragon 415 Firmware | ||
| Qualcomm Snapdragon 415 | ||
| Qualcomm SD 675 Firmware | ||
| Qualcomm Snapdragon 675 | ||
| Qualcomm Snapdragon 712 Firmware | ||
| Qualcomm Snapdragon 712 | ||
| Qualcomm SD710 Firmware | ||
| Qualcomm Snapdragon 710 | ||
| Qualcomm SD 670 | ||
| Qualcomm SDM670 | ||
| Qualcomm SD820 Firmware | ||
| Qualcomm SD820 Firmware | ||
| Qualcomm SD820A Firmware | ||
| Qualcomm SD820A Firmware | ||
| Qualcomm SD835 Firmware | ||
| Qualcomm Snapdragon 835 | ||
| Qualcomm SDA845 Firmware | ||
| Qualcomm SD845 | ||
| Qualcomm SD850 Firmware | ||
| Qualcomm SD850 | ||
| Qualcomm SD 8cx Firmware | ||
| Qualcomm Snapdragon 8cx | ||
| Qualcomm SXR1130 | ||
| Qualcomm SXR1130 Firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2018-11932?
The severity of CVE-2018-11932 is critical with a CVSS score of 9.1.
Which software is affected by CVE-2018-11932?
Qualcomm MDM9650 Firmware, Qualcomm MDM9655 Firmware, Qualcomm MSM8996AU Firmware, Qualcomm QCS605 Firmware, Qualcomm SD 410 Firmware, Google Android, Qualcomm SD 16 Firmware, Qualcomm SD 415 Firmware, Qualcomm SD 675 Firmware, Qualcomm SD 712 Firmware, Qualcomm SD 710 Firmware, Qualcomm SD 670 Firmware, Qualcomm SD 820a Firmware, Qualcomm SD 835 Firmware, Qualcomm SD 845 Firmware, Qualcomm SD 850 Firmware, Qualcomm SD 8cx Firmware, Qualcomm SXR1130 Firmware.
How does CVE-2018-11932 impact the affected software?
CVE-2018-11932 allows for improper input validation, which can lead to read and write access to the secure subsystem from the HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, and Snapdragon Mobile.
What is the fix for CVE-2018-11932?
The fix for CVE-2018-11932 is to apply the appropriate security patches provided by the software vendor or upgrade to a non-vulnerable version of the software.
Are there any additional references for CVE-2018-11932?
Yes, you can find additional references for CVE-2018-11932 at the following links: [Link 1](https://source.android.com/docs/security/bulletin/2019-02-01/#asterisk), [Link 2](https://source.android.com/docs/security/bulletin/2019-02-01), [Link 3](http://www.securityfocus.com/bid/106845).
- agent/references
- agent/type
- agent/first-publish-date
- agent/severity
- agent/weakness
- agent/author
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/event
- agent/last-modified-date
- agent/source
- collector/android-source
- source/Android
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- vendor/google
- canonical/android
- vendor/qualcomm
- canonical/qualcomm mdm9650
- canonical/qualcomm mdm9650 firmware
- canonical/qualcomm mdm9655 firmware
- canonical/qualcomm msm8996au firmware
- canonical/qualcomm qcs605
- canonical/qualcomm qcs605 firmware
- canonical/qualcomm sd410 firmware
- canonical/qualcomm snapdragon 410
- canonical/qualcomm sd 12 firmware
- canonical/qualcomm sd615 firmware
- canonical/qualcomm snapdragon 615
- canonical/qualcomm sd 16 firmware
- canonical/qualcomm snapdragon 415 firmware
- canonical/qualcomm snapdragon 415
- canonical/qualcomm sd 675 firmware
- canonical/qualcomm snapdragon 675
- canonical/qualcomm snapdragon 712 firmware
- canonical/qualcomm snapdragon 712
- canonical/qualcomm sd710 firmware
- canonical/qualcomm snapdragon 710
- canonical/qualcomm sd 670
- canonical/qualcomm sdm670
- canonical/qualcomm sd820 firmware
- canonical/qualcomm sd820a firmware
- canonical/qualcomm sd835 firmware
- canonical/qualcomm snapdragon 835
- canonical/qualcomm sda845 firmware
- canonical/qualcomm sd845
- canonical/qualcomm sd850 firmware
- canonical/qualcomm sd850
- canonical/qualcomm sd 8cx firmware
- canonical/qualcomm snapdragon 8cx
- canonical/qualcomm sxr1130
- canonical/qualcomm sxr1130 firmware