What is CVE-2018-11949?

CVE-2018-11949 is a critical-severity vulnerability in Qualcomm Mdm9150, classified under Improper Initialization. CVSS score: 9.8/10. Published 2019-05-24.

How severe is CVE-2018-11949?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Vulnerability in Qualcomm Mdm9150

CVE-2018-11949

Failure to initialize the extra buffer can lead to an out of buffer access in WLAN function in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9150, MDM9206, MDM9607, MDM9640…

Vulnerability class: Dirty Pipe (CVE-2022-0847)

EPSS: 0.009 (56.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Qualcomm Mdm9150
Qualcomm Mdm9150_firmware
Qualcomm Mdm9206
Qualcomm Mdm9206_firmware
Qualcomm Mdm9607
Qualcomm Mdm9607_firmware
Qualcomm Mdm9640
Qualcomm Mdm9640_firmware
Qualcomm Mdm9650
Qualcomm Mdm9650_firmware

Weakness classification (CWE)

CWE-665 — Improper Initialization

References

product-security@qualcomm.com (x_refsource_CONFIRM, Patch, Third Party Advisory)

Frequently asked questions

What is CVE-2018-11949?: CVE-2018-11949 is a critical-severity vulnerability in Qualcomm Mdm9150, classified under Improper Initialization. CVSS score: 9.8/10. Published 2019-05-24.
How severe is CVE-2018-11949?: Critical severity. CVSS v3 base score is 9.8 out of 10.