CVE-2018-11928 - Qualcomm Qca6574 Firmware, Qualcomm Sd 205 Firmware and Qualcomm Sd 820 Firmware

Critical 7.8

Lack of check on length parameter may cause buffer overflow while processing WMI commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ8074, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6174A, QCA6564, QCA6574, QCA6574AU, QCA6584, QCA6584AU, QCA8081, QCA9377, QCA9379, QCA9886, QCS605, SD 210/SD 212/SD 205, SD 425, SD 600, SD 625, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM630, SDM660, SDX20, SDX24, SM7150, SXR1130

Affected software

Qualcomm Qca6574 Firmware

Qualcomm Sd 205 Firmware

Qualcomm Sd 820 Firmware

Qualcomm Mdm9640 Firmware

Qualcomm Qca9886 Firmware

Qualcomm Sxr1130 Firmware

Qualcomm Mdm9650 Firmware

Qualcomm Sd 210 Firmware

Qualcomm Sdx24 Firmware

Qualcomm Mdm9607 Firmware

Qualcomm Msm8996au Firmware

Qualcomm Qcs605 Firmware

Qualcomm Sm7150 Firmware

Qualcomm Qca6584 Firmware

Qualcomm Sdm630 Firmware

Qualcomm Sd 625 Firmware

Qualcomm Sdm660 Firmware

Qualcomm Sd 425 Firmware

Qualcomm Sd 675 Firmware

Qualcomm Ipq8074 Firmware

Qualcomm Qca9377 Firmware

Qualcomm Sd 212 Firmware

Qualcomm Sda660 Firmware

Qualcomm Sd 636 Firmware

Qualcomm Mdm9206 Firmware

Qualcomm Sd 835 Firmware

Qualcomm Qca6564 Firmware

Qualcomm Qca8081 Firmware

Qualcomm Qca6584au Firmware

Qualcomm Sd 712 Firmware

Qualcomm Sd 850 Firmware

Qualcomm Sd 820a Firmware

Qualcomm Qca9379 Firmware

Qualcomm Sd 855 Firmware

Qualcomm Qca6574au Firmware

Qualcomm Sdx20 Firmware

Qualcomm Sd 845 Firmware

Qualcomm Sd 8cx Firmware

Qualcomm Qca6174a Firmware

Qualcomm Sd 710 Firmware

Qualcomm Sd 600 Firmware

Qualcomm Sd 670 Firmware

Reference links

Get alerted to vulnerabilities in your software

CVE alerts, vulnerability alerts, latest versions and news matched to your software stack.