CVE-2018-11966: Input Validation
Undefined behavior in UE while processing unknown IEI in OTA message in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU, QCS605, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SM7150, SnapdragonHighMed2016, SXR1130
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-11966?
CVE-2018-11966 has been classified with a high severity due to the potential for undefined behavior while processing OTA messages.
How do I fix CVE-2018-11966?
To fix CVE-2018-11966, ensure you're running the latest firmware updates provided by Qualcomm for affected devices.
What products are affected by CVE-2018-11966?
CVE-2018-11966 affects multiple Qualcomm chipsets, including MDM9150, MDM9206, MDM9607, and others used in various devices.
What types of devices are impacted by CVE-2018-11966?
Devices impacted by CVE-2018-11966 include smartphones, IoT devices, and automotive applications utilizing Qualcomm's Snapdragon chipsets.
Is CVE-2018-11966 publicly known?
Yes, CVE-2018-11966 is a publicly known vulnerability documented in various security bulletins.