CVE-2018-11980

CVE-2018-11980: falha em Qualcomm, Inc. Snapdragon Auto, Snapdragon…

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Snapdragon Mobile+ Monitorar Snapdragon Industrial IOT

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 0.2%
When a fake broadcast/multicast 11w rmf without mmie received, since no proper length check in wma_process_bip, buffer overflow will happen in both cds_is_mmie_valid and qdf_nbuf_trim_tail in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096AU, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8937, MSM8996AU, MSM8998, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCN7605, QCS605, SDM630, SDM636, SDM660, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130
Produtos afetados
Qualcomm, Inc. · Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
CVEs relacionadas — Qualcomm, Inc. Snapdragon Auto, Snapdragon…

No mesmo produto, das mais perigosas para as menos.

CVE-2019-2307—CVE-2019-2307EPSS 1.6%CVE-2019-10557—CVE-2019-10557EPSS 1.1%CVE-2019-2305—CVE-2019-2305EPSS 0.7%CVE-2019-2309—CVE-2019-2309EPSS 0.7%CVE-2019-2268—CVE-2019-2268EPSS 0.7%CVE-2019-10542—CVE-2019-10542EPSS 0.7%