CVE-2018-11856

Опубликовано: 29 окт. 2018

Источник: nvd

CVSS3: 7.8

CVSS2: 7.2

EPSS Низкий

Описание

Improper input validation leads to buffer overwrite in the WLAN function that handles WMI commands in Snapdragon Mobile in version SD 835, SD 845, SD 850.

Ссылки

http://www.securityfocus.com/bid/107681
Third Party Advisory
VDB Entry
https://www.qualcomm.com/company/product-security/bulletins
Vendor Advisory
http://www.securityfocus.com/bid/107681
Third Party Advisory
VDB Entry
https://www.qualcomm.com/company/product-security/bulletins
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:sd_845:-:*:*:*:*:*:*:*

Конфигурация 3

Одновременно

cpe:2.3:o:qualcomm:sd_850_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:sd_850:-:*:*:*:*:*:*:*

EPSS

Процентиль: 11%

0.00038

Низкий

7.8 High

CVSS3

7.2 High

CVSS2

Дефекты

CWE-119

Связанные уязвимости

GHSA-hm9g-x4hj-xwgj

CVSS3: 7.8

github

больше 3 лет назад

Improper input validation leads to buffer overwrite in the WLAN function that handles WMI commands in Snapdragon Mobile in version SD 835, SD 845, SD 850.

EPSS

Процентиль: 11%

0.00038

Низкий

7.8 High

CVSS3

7.2 High

CVSS2

Дефекты

CWE-119