CVE-2018-11267

2018-09-20 15:29:00 2019-03-06 21:01:28

In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9615, MDM9640, MDM9650, MDM9655, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, SDX20, Snapdragon_High_Med_2016, when sending an malformed XML data to deviceprogrammer/firehose it may do an out of bounds buffer write allowing a region of memory to be filled with 0x20.

Vector

LOCAL

Complexity

LOW

Authentication

NONE

Confidentiality

COMPLETE

Integrity

COMPLETE

Availability

COMPLETE
Qualcomm Sdx20 firmware - (not an official CPE) Qualcomm Sdm660 firmware - (not an official CPE) Qualcomm Sdm636 firmware - (not an official CPE) Qualcomm Sdm632 firmware - (not an official CPE) Qualcomm Sdm630 firmware - (not an official CPE) Qualcomm Sdm439 firmware - (not an official CPE) Qualcomm Sdm429 firmware - (not an official CPE) Qualcomm Sda660 firmware - (not an official CPE) Qualcomm Sd850 firmware - (not an official CPE) Qualcomm Sd845 firmware - (not an official CPE) Qualcomm Sd835 firmware - (not an official CPE) Qualcomm Sd820a firmware - (not an official CPE) Qualcomm Sd820 firmware - (not an official CPE) Qualcomm Sd652 firmware - (not an official CPE) Qualcomm Sd650 firmware - (not an official CPE) Qualcomm Sd625 firmware - (not an official CPE) Qualcomm Sd617 firmware - (not an official CPE) Qualcomm Sd616 firmware - (not an official CPE) Qualcomm Sd615 firmware - (not an official CPE) Qualcomm Sd600 firmware - (not an official CPE) Qualcomm Sd450 firmware - (not an official CPE) Qualcomm Sd435 firmware - (not an official CPE) Qualcomm Sd430 firmware - (not an official CPE) Qualcomm Sd427 firmware - (not an official CPE) Qualcomm Sd425 firmware - (not an official CPE) Qualcomm Sd415 firmware - (not an official CPE) Qualcomm Sd412 firmware - (not an official CPE) Qualcomm Sd410 firmware - (not an official CPE) Qualcomm Sd212 firmware - (not an official CPE) Qualcomm Sd210 firmware - (not an official CPE) Qualcomm Sd205 firmware - (not an official CPE) Qualcomm Msm8996au firmware - (not an official CPE) Qualcomm Mdm9655 firmware - (not an official CPE) Qualcomm Mdm9650 firmware - (not an official CPE) Qualcomm Mdm9640 firmware - (not an official CPE) Qualcomm Mdm9615 firmware - (not an official CPE) Qualcomm Mdm9607 firmware - (not an official CPE) Qualcomm Mdm9206 firmware - (not an official CPE) Qualcomm Snapdragon high med 2016 firmware - (not an official CPE)