Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2018-11859 Details

Buffer overwrite can happen in WLAN due to lack of validation of the input length in Snapdragon Mobile in version SD 845, SD 850.

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.8 HIGHVector:CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://www.qualcomm.com/company/product-security/bulletins	CVE	Vendor Advisory
http://www.securityfocus.com/bid/107681	CVE	Third Party AdvisoryVDB Entry
https://www.qualcomm.com/company/product-security/bulletins	[email protected]	Vendor Advisory
http://www.securityfocus.com/bid/107681	[email protected]	Third Party AdvisoryVDB Entry

CWE-ID	CWE Name	Source
CWE-119	Improper Restriction of Operations within the Bounds of a Memory Buffer	[email protected]

Product	Versions
qualcomm sd 845 firmware	All versions
CPE cpe:2.3:o:qualcomm:sd_845_firmware:-:::::::* Remediation No remediation found in references.
qualcomm sd 845	All versions
CPE cpe:2.3:h:qualcomm:sd_845:-:::::::* Remediation No remediation found in references.
qualcomm sd 850 firmware	All versions
CPE cpe:2.3:o:qualcomm:sd_850_firmware:-:::::::* Remediation No remediation found in references.
qualcomm sd 850	All versions
CPE cpe:2.3:h:qualcomm:sd_850:-:::::::* Remediation No remediation found in references.

6 change records found show changes

QUICK INFO