NetSight
medium5.3

CVE-2018-11935

Improper input validation might result in incorrect app id returned to the caller Instead of returning failure in Snapdragon Auto, Snapdragon Compute, Snapdrag…

Impact

Improper input validation might result in incorrect app id returned to the caller Instead of returning failure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in versions MDM9607, MDM9650, MDM9655, MSM8996AU, QCS605, SD 210/SD 212/SD 205, SD 410/12, SD 615/16/SD 415, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 8CX, SDA660, SDM630, SDM660, SXR1130.

Affected products

VendorProductAffected versions
QualcommMdm9607 Firmware
All versions
QualcommMdm9650 Firmware
All versions
QualcommMdm9655 Firmware
All versions
QualcommMsm8996au Firmware
All versions
QualcommQcs605 Firmware
All versions
QualcommSd 210 Firmware
All versions
QualcommSd 212 Firmware
All versions
QualcommSd 205 Firmware
All versions
QualcommSd 410 Firmware
All versions
QualcommSd 12 Firmware
All versions
QualcommSd 615 Firmware
All versions
QualcommSd 16 Firmware
All versions

Weakness classification

References