Vulnetix
Try Vulnetix Request Demo
CVE-2018-11980 PUBLISHED CVSS 7.800000190734863 HIGH

When a fake broadcast/multicast 11w rmf without mmie received, since no proper length check in wma_process_bip, buffer overflow will happen in both cds_is_mmie_valid and qdf_nbuf_trim_tail in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096AU, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8937, MSM8996AU, MSM8998, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCN7605, QCS605, SDM630, SDM636, SDM660, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130

EPSS 0.03% · 10.1th percentile

Risk Scores

CVSS v3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.03%
10.1th percentile

Affected Products

VendorProductVersions
qualcommqcn7605_firmware
qualcommmdm9607_firmware
qualcommapq8096au_firmware
qualcommapq8009_firmware
Qualcomm, Inc.Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & MusicAPQ8009, APQ8017, APQ8053, APQ8064, APQ8096AU, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8937, MSM8996AU, MSM8998, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCN7605, QCS605, SDM630, SDM636, SDM660, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130
qualcommapq8064_firmware
qualcommsm7150_firmware
qualcommsdx20_firmware
qualcommsxr1130_firmware
qualcommmdm9650_firmware
qualcommqca6174a_firmware
qualcommmsm8937_firmware
qualcommmdm9206_firmware
qualcommmdm9640_firmware
qualcommsdm636_firmware
qualcommapq8053_firmware
qualcommqca9379_firmware
qualcommqca6574au_firmware
qualcommsdx55_firmware
qualcommapq8017_firmware

…and 10 more

Timeline

References

Open in Interactive Console →