CVE-2018-11948: Out-of-bounds Read
First published: Mon Feb 04 2019(Updated: )
Exceeding the limit of usage entries are not tracked and the information will be lost causing the content to lose continuity in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in versions MSM8996AU, QCS605, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130.
Credit: product-security@qualcomm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Google Android | ||
| Qualcomm Msm8996au Firmware | ||
| Qualcomm Msm8996au | ||
| Qualcomm Qcs605 Firmware | ||
| Qualcomm Qcs605 | ||
| Qualcomm Sd 410 Firmware | ||
| Qualcomm Sd 410 | ||
| Qualcomm Sd 412 Firmware | ||
| Qualcomm Sd 412 | ||
| Qualcomm Sd 425 Firmware | ||
| Qualcomm Sd 425 | ||
| Qualcomm Sd 427 Firmware | ||
| Qualcomm Sd 427 | ||
| Qualcomm Sd 430 Firmware | ||
| Qualcomm Sd 430 | ||
| Qualcomm Sd 435 Firmware | ||
| Qualcomm Sd 435 | ||
| Qualcomm Sd 439 Firmware | ||
| Qualcomm Sd 439 | ||
| Qualcomm Sd 429 Firmware | ||
| Qualcomm Sd 429 | ||
| Qualcomm Sd 450 Firmware | ||
| Qualcomm Sd 450 | ||
| Qualcomm Sd 625 Firmware | ||
| Qualcomm Sd 625 | ||
| Qualcomm Sd 632 Firmware | ||
| Qualcomm Sd 632 | ||
| Qualcomm Sd 636 Firmware | ||
| Qualcomm Sd 636 | ||
| Qualcomm Sd 675 Firmware | ||
| Qualcomm Sd 675 | ||
| Qualcomm Sd 712 Firmware | ||
| Qualcomm Sd 712 | ||
| Qualcomm Sd 710 Firmware | ||
| Qualcomm Sd 710 | ||
| Qualcomm Sd 670 Firmware | ||
| Qualcomm Sd 670 | ||
| Qualcomm Sd 820 Firmware | ||
| Qualcomm Sd 820 | ||
| Qualcomm Sd 820a Firmware | ||
| Qualcomm Sd 820a | ||
| Qualcomm Sd 835 Firmware | ||
| Qualcomm Sd 835 | ||
| Qualcomm Sd 845 Firmware | ||
| Qualcomm Sd 845 | ||
| Qualcomm Sd 850 Firmware | ||
| Qualcomm Sd 850 | ||
| Qualcomm Sd 8cx Firmware | ||
| Qualcomm Sd 8cx | ||
| Qualcomm Sda660 Firmware | ||
| Qualcomm Sda660 | ||
| Qualcomm Sdm439 Firmware | ||
| Qualcomm Sdm439 | ||
| Qualcomm Sdm630 Firmware | ||
| Qualcomm Sdm630 | ||
| Qualcomm Sdm660 Firmware | ||
| Qualcomm Sdm660 | ||
| Qualcomm Snapdragon High Med 2016 Firmware | ||
| Qualcomm Snapdragon High Med 2016 | ||
| Qualcomm Sxr1130 Firmware | ||
| Qualcomm Sxr1130 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2018-11948?
The severity of CVE-2018-11948 is high.
What is the impact of CVE-2018-11948?
Exceeding the limit of usage entries can cause the content to lose continuity.
Which software products are affected by CVE-2018-11948?
Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon M and Google Android are affected.
How do I fix CVE-2018-11948?
Apply the necessary updates or patches provided by Qualcomm or Google.
Where can I find more information about CVE-2018-11948?
You can find more information about CVE-2018-11948 at the following links: [Link 1](https://source.android.com/docs/security/bulletin/2019-02-01/#asterisk), [Link 2](https://source.android.com/docs/security/bulletin/2019-02-01), [Link 3](http://www.securityfocus.com/bid/106845).
- agent/references
- agent/type
- agent/first-publish-date
- agent/severity
- agent/author
- agent/weakness
- agent/description
- agent/event
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/tags
- collector/android-source
- source/Android
- agent/software-canonical-lookup
- agent/last-modified-date
- collector/mitre-cve
- source/MITRE
- vendor/qualcomm
- canonical/qualcomm msm8996au firmware
- canonical/qualcomm msm8996au
- canonical/qualcomm qcs605 firmware
- canonical/qualcomm qcs605
- canonical/qualcomm sd 410 firmware
- canonical/qualcomm sd 410
- canonical/qualcomm sd 412 firmware
- canonical/qualcomm sd 412
- canonical/qualcomm sd 425 firmware
- canonical/qualcomm sd 425
- canonical/qualcomm sd 427 firmware
- canonical/qualcomm sd 427
- canonical/qualcomm sd 430 firmware
- canonical/qualcomm sd 430
- canonical/qualcomm sd 435 firmware
- canonical/qualcomm sd 435
- canonical/qualcomm sd 439 firmware
- canonical/qualcomm sd 439
- canonical/qualcomm sd 429 firmware
- canonical/qualcomm sd 429
- canonical/qualcomm sd 450 firmware
- canonical/qualcomm sd 450
- canonical/qualcomm sd 625 firmware
- canonical/qualcomm sd 625
- canonical/qualcomm sd 632 firmware
- canonical/qualcomm sd 632
- canonical/qualcomm sd 636 firmware
- canonical/qualcomm sd 636
- canonical/qualcomm sd 675 firmware
- canonical/qualcomm sd 675
- canonical/qualcomm sd 712 firmware
- canonical/qualcomm sd 712
- canonical/qualcomm sd 710 firmware
- canonical/qualcomm sd 710
- canonical/qualcomm sd 670 firmware
- canonical/qualcomm sd 670
- canonical/qualcomm sd 820 firmware
- canonical/qualcomm sd 820
- canonical/qualcomm sd 820a firmware
- canonical/qualcomm sd 820a
- canonical/qualcomm sd 835 firmware
- canonical/qualcomm sd 835
- canonical/qualcomm sd 845 firmware
- canonical/qualcomm sd 845
- canonical/qualcomm sd 850 firmware
- canonical/qualcomm sd 850
- canonical/qualcomm sd 8cx firmware
- canonical/qualcomm sd 8cx
- canonical/qualcomm sda660 firmware
- canonical/qualcomm sda660
- canonical/qualcomm sdm439 firmware
- canonical/qualcomm sdm439
- canonical/qualcomm sdm630 firmware
- canonical/qualcomm sdm630
- canonical/qualcomm sdm660 firmware
- canonical/qualcomm sdm660
- canonical/qualcomm snapdragon high med 2016 firmware
- canonical/qualcomm snapdragon high med 2016
- canonical/qualcomm sxr1130 firmware
- canonical/qualcomm sxr1130
- vendor/google
- canonical/google android