CVE-2018-11925

Data length received from firmware is not validated against the max allowed size which can result in buffer overflow

published May 24, 2019

CVSS
—
EPSS
0%
Percentile
10.7
In the wild
Unconfirmed
What it is

Data length received from firmware is not validated against the max allowed size which can result in buffer overflow. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ8064, IPQ8074, MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, QCS605, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 712 / SD 710 / SD 670, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM630, SDM660, SDX20, SDX24

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00210 · 10.7th percentile
Published
2019-05-24T16:33Z
EPSS history
Timeline
  • 24 MAY 16:33Z
    Data length received from firmware is not validated against the max allowed size which can result in buffer overflow
    cvelistv5