CVE-2018-13914: Buffer Overflow

Published Feb 25, 2019

Updated

Lack of input validation for data received from user space can lead to an out of bound array issue in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in version MDM9150, MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 636, SD 820A, SD 835, SDM630, SDM660, SDX20.

Affected Software

36 affected components

Qualcomm Snapdragon Auto Firmware

Qualcomm Snapdragon Auto

Qualcomm Snapdragon Consumer Internet Of Things Firmware

Qualcomm Snapdragon Consumer Internet Of Things

Qualcomm Snapdragon Industrial Internet Of Things Firmware

Qualcomm Snapdragon Industrial Internet Of Things

Qualcomm Mdm9150 Firmware

Qualcomm MDM9150

Qualcomm Mdm9206 Firmware

Qualcomm MDM9206

Qualcomm Mdm9607 Firmware

Qualcomm MDM9607

Qualcomm Mdm9650 Firmware

Qualcomm MDM9650

Qualcomm Msm8909w Firmware

Qualcomm MSM8909W

Qualcomm Msm8996au Firmware

Qualcomm MSM8996AU

Qualcomm Sd 210 Firmware

Qualcomm SD 210

Qualcomm Sd 212 Firmware

Qualcomm SD 212

Qualcomm Sd 205 Firmware

Qualcomm SD 205

Qualcomm Sd 636 Firmware

Qualcomm SD 636

Qualcomm Sd 820a Firmware

Qualcomm SD 820A

Qualcomm Sd 835 Firmware

Qualcomm SD 835

Qualcomm Sdm630 Firmware

Qualcomm SDM630

Qualcomm Sdm660 Firmware

Qualcomm SDM660

Qualcomm Sdx20 Firmware

Qualcomm SDX20

Remediation

Patch Available

https://www.codeaurora.org/security-bulletin/2019/02/04/february-2019-code-aurora-security-bulletin

Event History

Feb 25, 2019

CVE Published

10:29 PM

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2018-13914?

CVE-2018-13914 is a vulnerability that allows an attacker to cause an out-of-bound array issue in certain Qualcomm Snapdragon devices.

Which software versions are affected by CVE-2018-13914?

CVE-2018-13914 affects Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, and Snapdragon Wearables in version MDM9150, MDM9206, MDM9607, MDM9650, MSM8909W, and MSM8996AU, as well as SD 210, SD 212, and SD 205.

What is the severity of CVE-2018-13914?

The severity of CVE-2018-13914 is high with a CVSS score of 7.8.

How can I fix CVE-2018-13914?

To fix CVE-2018-13914, it is recommended to apply the necessary security updates provided by Qualcomm.

Where can I find more information about CVE-2018-13914?

You can find more information about CVE-2018-13914 in the February 2019 Code Aurora Security Bulletin issued by Qualcomm.