CVE-2018-11942: Infoleak
Failure to initialize the reserved memory which is sent to the firmware might lead to exposure of 1 byte of uninitialized kernel SKB memory to FW in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ8064, IPQ8074, MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCS405, QCS605, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM630, SDM660, SDX20, SDX24
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2018-11942?
CVE-2018-11942 is classified as a high severity vulnerability due to the potential exposure of sensitive information.
What could be affected by CVE-2018-11942?
CVE-2018-11942 affects various Qualcomm firmware including Snapdragon and MDM series, potentially compromising kernel SKB memory.
How do I fix CVE-2018-11942?
To fix CVE-2018-11942, ensure that your firmware is updated to a version that addresses this vulnerability.
What are the potential impacts of CVE-2018-11942?
The impact of CVE-2018-11942 could include exposure of uninitialized memory, which may lead to information leaks.
Is it safe to continue using devices affected by CVE-2018-11942?
It is not safe to continue using affected devices without applying the security updates to mitigate CVE-2018-11942.