CVE-2018-11996

CVE-2018-11996: vulnerability in Qualcomm, Inc. Snapdragon Automobile…

Published · Updated

Follow this CVE+ Monitor Snapdragon Mobile+ Monitor Snapdragon Wear

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.2%
When a malformed command is sent to the device programmer, an out-of-bounds access can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 600, SD 820, SD 820A, SD 835, SDA660, SDX20, SDX24.
Affected products
Qualcomm, Inc. · Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Related CVEs — Qualcomm, Inc. Snapdragon Automobile…

In the same product, most dangerous first.

CVE-2015-9201—CVE-2015-9201EPSS 1.4%CVE-2015-9145—CVE-2015-9145EPSS 1.4%CVE-2014-9988—CVE-2014-9988EPSS 1.4%CVE-2014-10054—CVE-2014-10054EPSS 1.4%CVE-2015-9184—CVE-2015-9184EPSS 1.4%CVE-2015-9159—CVE-2015-9159EPSS 1.4%