CVE-2018-11935: Input Validation
First published: Mon Feb 04 2019(Updated: )
Improper input validation might result in incorrect app id returned to the caller Instead of returning failure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in versions MDM9607, MDM9650, MDM9655, MSM8996AU, QCS605, SD 210/SD 212/SD 205, SD 410/12, SD 615/16/SD 415, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 8CX, SDA660, SDM630, SDM660, SXR1130.
Credit: product-security@qualcomm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Android | ||
| Qualcomm MD9607 Firmware | ||
| Qualcomm MDM9607 firmware | ||
| Qualcomm MDM9650 | ||
| Qualcomm MDM9650 firmware | ||
| Qualcomm MDM9655 firmware | ||
| Qualcomm MDM9655 firmware | ||
| qualcomm MSM8996AU firmware | ||
| Qualcomm MSM8996AU Firmware | ||
| Qualcomm QCS605 | ||
| Qualcomm QCS605 Firmware | ||
| Qualcomm SD210 Firmware | ||
| Qualcomm SD 210 Firmware | ||
| Qualcomm SD 212 | ||
| Qualcomm SD 212 Firmware | ||
| Qualcomm 205 Firmware | ||
| Qualcomm SD205 Firmware | ||
| Qualcomm SD410 Firmware | ||
| Qualcomm Snapdragon 410 | ||
| Qualcomm SD 12 Firmware | ||
| Qualcomm SD 12 Firmware | ||
| Qualcomm SD615 Firmware | ||
| Qualcomm Snapdragon 615 | ||
| Qualcomm SD 16 Firmware | ||
| Qualcomm SD 16 Firmware | ||
| Qualcomm Snapdragon 415 Firmware | ||
| Qualcomm Snapdragon 415 | ||
| Qualcomm SDM636 Firmware | ||
| Qualcomm Snapdragon 636 | ||
| Qualcomm SD 675 Firmware | ||
| Qualcomm Snapdragon 675 | ||
| Qualcomm Snapdragon 712 Firmware | ||
| Qualcomm Snapdragon 712 | ||
| Qualcomm SD710 Firmware | ||
| Qualcomm Snapdragon 710 | ||
| Qualcomm SD 670 | ||
| Qualcomm SDM670 | ||
| Qualcomm SD820 Firmware | ||
| Qualcomm SD820 Firmware | ||
| Qualcomm SD820A Firmware | ||
| Qualcomm SD820A Firmware | ||
| Qualcomm SD835 Firmware | ||
| Qualcomm Snapdragon 835 | ||
| Qualcomm SDA845 Firmware | ||
| Qualcomm SD845 | ||
| Qualcomm SD850 Firmware | ||
| Qualcomm SD850 | ||
| Qualcomm SD 8cx firmware | ||
| Qualcomm Snapdragon 8cx | ||
| Qualcomm SDA660 | ||
| Qualcomm SDA660 | ||
| Qualcomm SDM630 | ||
| Qualcomm SDM630 Firmware | ||
| Qualcomm SD660 Firmware | ||
| Qualcomm Snapdragon 660 | ||
| Qualcomm SXR1130 | ||
| Qualcomm SXR1130 Firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2018-11935?
CVE-2018-11935 is a vulnerability that results in incorrect app id returned to the caller in certain Qualcomm and Google Android products, potentially allowing unauthorized access to sensitive information.
Which products are affected by CVE-2018-11935?
CVE-2018-11935 affects various Qualcomm products such as Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, and Snapdragon Mobile in certain versions. It also affects Google Android.
What is the severity of CVE-2018-11935?
The severity of CVE-2018-11935 is rated as high, with a severity value of 5.3.
How can I fix CVE-2018-11935?
To fix CVE-2018-11935, it is recommended to apply the necessary security patches and updates provided by Qualcomm and Google Android. It is also important to regularly update your software to ensure you have the latest security fixes.
Where can I find more information about CVE-2018-11935?
More information about CVE-2018-11935 can be found in the official Android Security Bulletin for February 2019, as well as the provided references.
- agent/references
- agent/type
- agent/first-publish-date
- agent/weakness
- agent/author
- agent/severity
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/event
- agent/last-modified-date
- agent/source
- collector/android-source
- source/Android
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- vendor/google
- canonical/android
- vendor/qualcomm
- canonical/qualcomm md9607 firmware
- canonical/qualcomm mdm9607 firmware
- canonical/qualcomm mdm9650
- canonical/qualcomm mdm9650 firmware
- canonical/qualcomm mdm9655 firmware
- canonical/qualcomm msm8996au firmware
- canonical/qualcomm qcs605
- canonical/qualcomm qcs605 firmware
- canonical/qualcomm sd210 firmware
- canonical/qualcomm sd 210 firmware
- canonical/qualcomm sd 212
- canonical/qualcomm sd 212 firmware
- canonical/qualcomm 205 firmware
- canonical/qualcomm sd205 firmware
- canonical/qualcomm sd410 firmware
- canonical/qualcomm snapdragon 410
- canonical/qualcomm sd 12 firmware
- canonical/qualcomm sd615 firmware
- canonical/qualcomm snapdragon 615
- canonical/qualcomm sd 16 firmware
- canonical/qualcomm snapdragon 415 firmware
- canonical/qualcomm snapdragon 415
- canonical/qualcomm sdm636 firmware
- canonical/qualcomm snapdragon 636
- canonical/qualcomm sd 675 firmware
- canonical/qualcomm snapdragon 675
- canonical/qualcomm snapdragon 712 firmware
- canonical/qualcomm snapdragon 712
- canonical/qualcomm sd710 firmware
- canonical/qualcomm snapdragon 710
- canonical/qualcomm sd 670
- canonical/qualcomm sdm670
- canonical/qualcomm sd820 firmware
- canonical/qualcomm sd820a firmware
- canonical/qualcomm sd835 firmware
- canonical/qualcomm snapdragon 835
- canonical/qualcomm sda845 firmware
- canonical/qualcomm sd845
- canonical/qualcomm sd850 firmware
- canonical/qualcomm sd850
- canonical/qualcomm sd 8cx firmware
- canonical/qualcomm snapdragon 8cx
- canonical/qualcomm sda660
- canonical/qualcomm sdm630 firmware
- canonical/qualcomm sd660 firmware
- canonical/qualcomm snapdragon 660
- canonical/qualcomm sxr1130
- canonical/qualcomm sxr1130 firmware