CVE-2018-13886: Buffer Overflow
Unchecked OTA field in GNSS XTRA3 lead to integer overflow and then buffer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9615, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 600, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDM439, SDM630, SDM660, SDX20, SM7150, SnapdragonHighMed2016, SXR1130
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-13886 vulnerability about?
Unchecked OTA field in GNSS XTRA3 lead to integer overflow and then buffer overflow in Snapdragon devices.
How severe is CVE-2018-13886 vulnerability?
The severity of CVE-2018-13886 vulnerability is 9.8 (Critical).
Which software or devices are affected by CVE-2018-13886 vulnerability?
Qualcomm devices with specific firmware versions and Google Android are affected by CVE-2018-13886 vulnerability.
Are Google Android devices vulnerable to CVE-2018-13886?
Yes, Google Android devices are affected by CVE-2018-13886 vulnerability.
Where can I find more information about CVE-2018-13886 vulnerability?
You can find more information about CVE-2018-13886 vulnerability on the official Qualcomm and Google Android security bulletin pages.