CVE-2018-11858

CVE-2018-11858: vulnerability in Qualcomm, Inc. Snapdragon Mobile

Published · Updated

Follow this CVE+ Monitor Snapdragon Mobile

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.2%
When processing IE set command, buffer overwrite may occur due to lack of input validation of the IE length in Snapdragon Mobile in version SD 835, SD 845, SD 850.
Affected products
Qualcomm, Inc. · Snapdragon Mobile
Related CVEs — Qualcomm, Inc. Snapdragon Mobile

In the same product, most dangerous first.

CVE-2017-14915—CVE-2017-14915EPSS 1.6%CVE-2015-9219—CVE-2015-9219EPSS 1.4%CVE-2015-9150—CVE-2015-9150EPSS 1.4%CVE-2016-10496—CVE-2016-10496EPSS 1.4%CVE-2015-9215—CVE-2015-9215EPSS 1.4%CVE-2015-9179—CVE-2015-9179EPSS 1.4%