What is CVE-2018-11996?

CVE-2018-11996 is a vulnerability that occurs when a malformed command is sent to the device programmer, leading to an out-of-bounds access in Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear.

What is the severity of CVE-2018-11996?

The severity of CVE-2018-11996 is rated as high, with a CVSS score of 7.8.

Which software versions are affected by CVE-2018-11996?

CVE-2018-11996 affects several software versions, including Qualcomm MDM9206 Firmware, MDM9607, MDM9650 Firmware, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 600, SD 820, SD 820A, SD 835, SDA660, SDX20, and SDX24.

How can I fix CVE-2018-11996?

To fix CVE-2018-11996, it is recommended to apply the security patches provided by Qualcomm and Google Android.

Where can I find more information about CVE-2018-11996?

You can find more information about CVE-2018-11996 on the SecurityFocus website, Qualcomm Product Security Bulletins, and the Android Security Bulletin for November 2018.

Vulnerability/
CVE-2018-11996

high

7.8

CWE

129

5/11/2018

28/11/2018

5/8/2024

CVE-2018-11996: Out-of-bounds Read

First published: Mon Nov 05 2018(Updated: )

When a malformed command is sent to the device programmer, an out-of-bounds access can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 600, SD 820, SD 820A, SD 835, SDA660, SDX20, SDX24.

Credit: product-security@qualcomm.com

Affected Software	Affected Version	How to fix
Android
Qualcomm MDM9206
Qualcomm MDM9206 firmware
Qualcomm MD9607 Firmware
Qualcomm MDM9607 firmware
Qualcomm MDM9650
Qualcomm MDM9650 firmware
Qualcomm MDM9655 firmware
Qualcomm MDM9655 firmware
Qualcomm MSM8909W
Qualcomm Snapdragon 8909
qualcomm MSM8996AU firmware
Qualcomm MSM8996AU Firmware
Qualcomm SD 210 Firmware
Qualcomm SD 210
Qualcomm SD 212 Firmware
Qualcomm SD 212 Firmware
Qualcomm SD 205 Firmware
Qualcomm SD 205
Qualcomm SD 600 Firmware
Qualcomm Snapdragon 600
Qualcomm SD820 Firmware
Qualcomm Snapdragon 820
Qualcomm SD820A Firmware
Qualcomm SD820A Firmware
Qualcomm SD 835 Firmware
Qualcomm Snapdragon 835
Qualcomm SDA660
Qualcomm SDA660
Qualcomm SDX20 Firmware
Qualcomm SDX20 Firmware
Qualcomm SDX24 Firmware
Qualcomm SDX24

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is CVE-2018-11996?
CVE-2018-11996 is a vulnerability that occurs when a malformed command is sent to the device programmer, leading to an out-of-bounds access in Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear.
What is the severity of CVE-2018-11996?
The severity of CVE-2018-11996 is rated as high, with a CVSS score of 7.8.
Which software versions are affected by CVE-2018-11996?
CVE-2018-11996 affects several software versions, including Qualcomm MDM9206 Firmware, MDM9607, MDM9650 Firmware, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 600, SD 820, SD 820A, SD 835, SDA660, SDX20, and SDX24.
How can I fix CVE-2018-11996?
To fix CVE-2018-11996, it is recommended to apply the security patches provided by Qualcomm and Google Android.
Where can I find more information about CVE-2018-11996?
You can find more information about CVE-2018-11996 on the SecurityFocus website, Qualcomm Product Security Bulletins, and the Android Security Bulletin for November 2018.