CVE-2018-11937: Input Validation
Lack of input validation before copying can lead to a buffer over read in WLAN function in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6574AU, QCS605, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM630, SDM660, SDX20, SDX24, SM7150
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2018-11937?
CVE-2018-11937 has been classified with a high severity level due to the potential impact of the buffer over read vulnerability.
How do I fix CVE-2018-11937?
To fix CVE-2018-11937, ensure that the firmware for affected Qualcomm devices is updated to the latest version provided by the manufacturer.
Which devices are affected by CVE-2018-11937?
CVE-2018-11937 affects multiple Qualcomm Snapdragon products, including MDM9150, MDM9206, MDM9607, and various Snapdragon mobile and IoT devices.
What type of vulnerability is CVE-2018-11937?
CVE-2018-11937 is a buffer over read vulnerability resulting from lack of input validation in WLAN functions.
Is CVE-2018-11937 a remote vulnerability?
Yes, CVE-2018-11937 can potentially be exploited remotely, allowing attackers to read sensitive information.