Lucene search

QualcommCVE-2018-11876

HistoryOct 29, 2018 - 6:29 p.m.

CVE-2018-11876

2018-10-2918:29:05

CWE-119

qualcomm

web.nvd.nist.gov

input validation

wlan

buffer overflow

snapdragon mobile

cve-2018-11876

nvd

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.9

Confidence

High

EPSS

Percentile

12.6%

JSON

Lack of input validation while copying to buffer in WLAN will lead to a buffer overflow in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660.

Affected configurations

Nvd

Node

qualcommsd_835Match-

AND

qualcommsd_835_firmwareMatch-

Node

qualcommsd_845Match-

AND

qualcommsd_845_firmwareMatch-

Node

qualcommsd_850Match-

AND

qualcommsd_850_firmwareMatch-

Node

qualcommsda660_firmwareMatch-

AND

qualcommsda660Match-

VendorProductVersionCPE
qualcommsd_835-cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*
qualcommsd_835_firmware-cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*
qualcommsd_845-cpe:2.3:h:qualcomm:sd_845:-:*:*:*:*:*:*:*
qualcommsd_845_firmware-cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*
qualcommsd_850-cpe:2.3:h:qualcomm:sd_850:-:*:*:*:*:*:*:*
qualcommsd_850_firmware-cpe:2.3:o:qualcomm:sd_850_firmware:-:*:*:*:*:*:*:*
qualcommsda660_firmware-cpe:2.3:o:qualcomm:sda660_firmware:-:*:*:*:*:*:*:*
qualcommsda660-cpe:2.3:h:qualcomm:sda660:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
qualcomm	sd_835	-	cpe:2.3:h:qualcomm:sd_835:-:::::::*
qualcomm	sd_835_firmware	-	cpe:2.3:o:qualcomm:sd_835_firmware:-:::::::*
qualcomm	sd_845	-	cpe:2.3:h:qualcomm:sd_845:-:::::::*
qualcomm	sd_845_firmware	-	cpe:2.3:o:qualcomm:sd_845_firmware:-:::::::*
qualcomm	sd_850	-	cpe:2.3:h:qualcomm:sd_850:-:::::::*
qualcomm	sd_850_firmware	-	cpe:2.3:o:qualcomm:sd_850_firmware:-:::::::*
qualcomm	sda660_firmware	-	cpe:2.3:o:qualcomm:sda660_firmware:-:::::::*
qualcomm	sda660	-	cpe:2.3:h:qualcomm:sda660:-:::::::*

CNA Affected

[
  {
    "product": "Snapdragon Mobile",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "SD 835, SD 845, SD 850, SDA660"
      }
    ]
  }
]

References

www.securityfocus.com/bid/107681

www.qualcomm.com/company/product-security/bulletins

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.9

Confidence

High

EPSS

Percentile

12.6%

JSON

Related for CVE-2018-11876