NetSight
high7.8

CVE-2018-11830

Improper input validation in QCPE create function may lead to integer overflow in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Ind…

Impact

Improper input validation in QCPE create function may lead to integer overflow in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9206, MDM9607, MDM9650, MDM9655, MSM8996AU, SD 410/12, SD 820A

Affected products

VendorProductAffected versions
QualcommMdm9206 Firmware
All versions
QualcommMdm9607 Firmware
All versions
QualcommMdm9650 Firmware
All versions
QualcommMdm9655 Firmware
All versions
QualcommMsm8996au Firmware
All versions
QualcommSd 410 Firmware
All versions
QualcommSd 412 Firmware
All versions
QualcommSd 820a Firmware
All versions

Weakness classification

References