CVE-2018-11264

🗓️ 28 Nov 2018 15:00:00Reported by qualcommType

Possible buffer overflow in Ontario fingerprint code due to lack of input validation for the parameters coming into TZ from HLOS in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SDA660

Reporter	Title	Published	Views	Family All 6
android	CVE-2018-11264	1 Nov 201800:00	–	android
CNVD	Buffer Overflow Vulnerability in Multiple Qualcomm Snapdragon Products (CNVD-2018-24839)	29 Nov 201800:00	–	cnvd
Cvelist	CVE-2018-11264	28 Nov 201815:00	–	cvelist
EUVD	EUVD-2018-3304	7 Oct 202500:30	–	euvd
NVD	CVE-2018-11264	28 Nov 201815:29	–	nvd
Prion	Buffer overflow	28 Nov 201815:29	–	prion

NVD

Node

qualcomm mdm9206_firmwareMatch-

AND

qualcomm mdm9206Match-

Node

qualcomm mdm9607_firmwareMatch-

AND

qualcomm mdm9607Match-

Node

qualcomm mdm9650_firmwareMatch-

AND

qualcomm mdm9650Match-

Node

qualcomm msm8996au_firmwareMatch-

AND

qualcomm msm8996auMatch-

Node

qualcomm sd_210_firmwareMatch-

AND

qualcomm sd_210Match-

Node

qualcomm sd_212_firmwareMatch-

AND

qualcomm sd_212Match-

Node

qualcomm sd_205_firmwareMatch-

AND

qualcomm sd_205Match-

Node

qualcomm sd_410_firmwareMatch-

AND

qualcomm sd_410Match-

Node

qualcomm sd_412_firmwareMatch-

AND

qualcomm sd_412Match-

Node

qualcomm sd_425_firmwareMatch-

AND

qualcomm sd_425Match-

Node

qualcomm sd_430_firmwareMatch-

AND

qualcomm sd_430Match-

Node

qualcomm sd_450_firmwareMatch-

AND

qualcomm sd_450Match-

Node

qualcomm sd_625_firmwareMatch-

AND

qualcomm sd_625Match-

Node

qualcomm sd_650_firmwareMatch-

AND

qualcomm sd_650Match-

Node

qualcomm sd_652_firmwareMatch-

AND

qualcomm sd_652Match-

Node

qualcomm sd_820_firmwareMatch-

AND

qualcomm sd_820Match-

Node

qualcomm sd_820a_firmwareMatch-

AND

qualcomm sd_820aMatch-

Node

qualcomm sd_835_firmwareMatch-

AND

qualcomm sd_835Match-

Node

qualcomm sda660_firmwareMatch-

AND

qualcomm sda660Match-

[
  {
    "product": "Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SDA660"
      }
    ]
  }
]

Source	Link
qualcomm	www.qualcomm.com/company/product-security/bulletins
securityfocus	www.securityfocus.com/bid/105838

21 Nov 2024 03:43Current

8.1High risk

Vulners AI Score8.1

CVSS 27.2

CVSS 37.8

EPSS0.0004