Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
CVE-2018-11288 Details
Description
Possible undefined behavior due to lack of size check in function for parameter segment_idx can lead to a read outside of the intended region in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9650, MDM9655, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDX24, SXR1130
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://www.qualcomm.com/company/product-security/bulletins | CVE | Vendor Advisory |
| https://www.qualcomm.com/company/product-security/bulletins | [email protected] | Vendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-129 | Improper Validation of Array Index | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| qualcomm mdm9206 firmware | All versions |
CPE
Remediation
| |
| qualcomm mdm9206 | All versions |
CPE
Remediation
| |
| qualcomm mdm9607 firmware | All versions |
CPE
Remediation
| |
| qualcomm mdm9607 | All versions |
CPE
Remediation
| |
| qualcomm mdm9650 firmware | All versions |
CPE
Remediation
| |
| qualcomm mdm9650 | All versions |
CPE
Remediation
| |
| qualcomm mdm9655 firmware | All versions |
CPE
Remediation
| |
| qualcomm mdm9655 | All versions |
CPE
Remediation
| |
| qualcomm msm8996au firmware | All versions |
CPE
Remediation
| |
| qualcomm msm8996au | All versions |
CPE
Remediation
| |
| qualcomm sd 210 firmware | All versions |
CPE
Remediation
| |
| qualcomm sd 210 | All versions |
CPE
Remediation
| |
| qualcomm sd 212 firmware | All versions |
CPE
Remediation
| |
| qualcomm sd 212 | All versions |
CPE
Remediation
| |
| qualcomm sd 205 firmware | All versions |
CPE
Remediation
| |
| qualcomm sd 205 | All versions |
CPE
Remediation
| |
| qualcomm sd 410 firmware | All versions |
CPE
Remediation
| |
| qualcomm sd 410 | All versions |
CPE
Remediation
| |
| qualcomm sd 412 firmware | All versions |
CPE
Remediation
| |
| qualcomm sd 412 | All versions |
CPE
Remediation
| |
| qualcomm sd 712 firmware | All versions |
CPE
Remediation
| |
| qualcomm sd 712 | All versions |
CPE
Remediation
| |
| qualcomm sd 710 firmware | All versions |
CPE
Remediation
| |
| qualcomm sd 710 | All versions |
CPE
Remediation
| |
| qualcomm sd 670 firmware | All versions |
CPE
Remediation
| |
| qualcomm sd 670 | All versions |
CPE
Remediation
| |
| qualcomm sd 820 firmware | All versions |
CPE
Remediation
| |
| qualcomm sd 820 | All versions |
CPE
Remediation
| |
| qualcomm sd 820a firmware | All versions |
CPE
Remediation
| |
| qualcomm sd 820a | All versions |
CPE
Remediation
| |
| qualcomm sd 835 firmware | All versions |
CPE
Remediation
| |
| qualcomm sd 835 | All versions |
CPE
Remediation
| |
| qualcomm sd 845 firmware | All versions |
CPE
Remediation
| |
| qualcomm sd 845 | All versions |
CPE
Remediation
| |
| qualcomm sd 850 firmware | All versions |
CPE
Remediation
| |
| qualcomm sd 850 | All versions |
CPE
Remediation
| |
| qualcomm sdx24 firmware | All versions |
CPE
Remediation
| |
| qualcomm sdx24 | All versions |
CPE
Remediation
| |
| qualcomm sxr1130 firmware | All versions |
CPE
Remediation
| |
| qualcomm sxr1130 | All versions |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| May 14, 2024 | CVE Modified | [email protected] |
| Jan 25, 2019 | Initial Analysis | [email protected] |