What is CVE-2018-11874?

CVE-2018-11874 is a high-severity vulnerability in Qualcomm Sd 835, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. CVSS score: 7.8/10. Published 2018-10-29.

How severe is CVE-2018-11874?

High severity. CVSS v3 base score is 7.8 out of 10.

Buffer overflow in Qualcomm Sd 835

CVE-2018-11874

Buffer overflow if the length of passphrase is more than 32 when setting up secure NDP connection in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660.

Vulnerability class: Buffer Overflow

EPSS: 0.002 (16.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Qualcomm Sd_835
Qualcomm Sd_835_firmware
Qualcomm Sd_845
Qualcomm Sd_845_firmware
Qualcomm Sd_850
Qualcomm Sd_850_firmware
Qualcomm Sda660
Qualcomm Sda660_firmware
Qualcomm, Inc. Snapdragon Mobile — versions SD 835, SD 845, SD 850, SDA660

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

product-security@qualcomm.com (x_refsource_CONFIRM, Vendor Advisory)
product-security@qualcomm.com (vdb-entry, x_refsource_BID)

Frequently asked questions

What is CVE-2018-11874?: CVE-2018-11874 is a high-severity vulnerability in Qualcomm Sd 835, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. CVSS score: 7.8/10. Published 2018-10-29.
How severe is CVE-2018-11874?: High severity. CVSS v3 base score is 7.8 out of 10.