What is CVE-2018-13924?

CVE-2018-13924 is a critical-severity vulnerability in Qualcomm Ipq8074, classified under Out-of-bounds Write. CVSS score: 9.8/10. Published 2019-07-22.

How severe is CVE-2018-13924?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Buffer overflow in Qualcomm Ipq8074

CVE-2018-13924

Lack of check to prevent the buffer length taking negative values can lead to stack overflow. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdra…

Vulnerability class: Buffer Overflow

EPSS: 0.011 (61.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Qualcomm Ipq8074
Qualcomm Ipq8074_firmware
Qualcomm Mdm9150
Qualcomm Mdm9150_firmware
Qualcomm Mdm9206
Qualcomm Mdm9206_firmware
Qualcomm Mdm9607
Qualcomm Mdm9607_firmware
Qualcomm Mdm9615
Qualcomm Mdm9615_firmware

Weakness classification (CWE)

CWE-787 — Out-of-bounds Write

References

product-security@qualcomm.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2018-13924?: CVE-2018-13924 is a critical-severity vulnerability in Qualcomm Ipq8074, classified under Out-of-bounds Write. CVSS score: 9.8/10. Published 2019-07-22.
How severe is CVE-2018-13924?: Critical severity. CVSS v3 base score is 9.8 out of 10.