CVE-2018-11934: Input Validation
Possible out of bounds write due to improper input validation while processing DOACS vendor command in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCS605, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 712 / SD 710 / SD 670, SD 820A, SD 845 / SD 850, SD 855, SDA660, SDM630, SDM660, SDX20, SDX24
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2018-11934?
CVE-2018-11934 has a medium severity due to the potential for out of bounds write vulnerabilities.
How do I fix CVE-2018-11934?
To fix CVE-2018-11934, apply the latest security patches provided by Qualcomm for the affected firmware versions.
Which devices are affected by CVE-2018-11934?
CVE-2018-11934 affects various Qualcomm devices including those running MDM9150, MDM9206, MDM9607, and MDM9640 firmware.
What type of vulnerability is CVE-2018-11934?
CVE-2018-11934 is a vulnerability related to improper input validation that may lead to out of bounds writes.
Is there a workaround for CVE-2018-11934?
Currently, there are no known workarounds for CVE-2018-11934 other than applying the security updates from Qualcomm.