CVE-2018-11267

🗓️ 20 Sep 2018 13:00:00Reported by qualcommType

cve🔗 web.nvd.nist.gov👁 47 Views🌐 WEB

CVE-2018-11267 in Snapdragon (Automobile, Mobile, Wear) MDM9206, MDM9607, MDM9615, MDM9640, MDM9650, MDM9655, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, SDX20, when sending malformed XML data to deviceprogrammer/firehose leading to out of bounds buffer write

Reporter	Title	Published	Views	Family All 4
Cvelist	CVE-2018-11267	20 Sep 201813:00	–	cvelist
EUVD	EUVD-2018-3307	7 Oct 202500:30	–	euvd
NVD	CVE-2018-11267	20 Sep 201813:29	–	nvd
Prion	Design/Logic Flaw	20 Sep 201813:29	–	prion

NVD

Node

qualcomm mdm9206_firmwareMatch-

AND

qualcomm mdm9206Match-

Node

qualcomm mdm9607_firmwareMatch-

AND

qualcomm mdm9607Match-

Node

qualcomm mdm9615_firmwareMatch-

AND

qualcomm mdm9615Match-

Node

qualcomm mdm9640_firmwareMatch-

AND

qualcomm mdm9640Match-

Node

qualcomm mdm9650_firmwareMatch-

AND

qualcomm mdm9650Match-

Node

qualcomm mdm9655_firmwareMatch-

AND

qualcomm mdm9655Match-

Node

qualcomm msm8996au_firmwareMatch-

AND

qualcomm msm8996auMatch-

Node

qualcomm sd210_firmwareMatch-

AND

qualcomm sd210Match-

Node

qualcomm sd212_firmwareMatch-

AND

qualcomm sd212Match-

Node

qualcomm sd205_firmwareMatch-

AND

qualcomm sd205Match-

Node

qualcomm sd410_firmwareMatch-

AND

qualcomm sd410Match-

Node

qualcomm sd412_firmwareMatch-

AND

qualcomm sd412Match-

Node

qualcomm sd425_firmwareMatch-

AND

qualcomm sd425Match-

Node

qualcomm sd427_firmwareMatch-

AND

qualcomm sd427Match-

Node

qualcomm sd430_firmwareMatch-

AND

qualcomm sd430Match-

Node

qualcomm sd435_firmwareMatch-

AND

qualcomm sd435Match-

Node

qualcomm sd450_firmwareMatch-

AND

qualcomm sd450Match-

Node

qualcomm sd600_firmwareMatch-

AND

qualcomm sd600Match-

Node

qualcomm sd615_firmwareMatch-

AND

qualcomm sd615Match-

Node

qualcomm sd616_firmwareMatch-

AND

qualcomm sd616Match-

Node

qualcomm sd415_firmwareMatch-

AND

qualcomm sd415Match-

Node

qualcomm sd617_firmwareMatch-

AND

qualcomm sd617Match-

Node

qualcomm sd625_firmwareMatch-

AND

qualcomm sd625Match-

Node

qualcomm sd650_firmwareMatch-

AND

qualcomm sd650Match-

Node

qualcomm sd652_firmwareMatch-

AND

qualcomm sd652Match-

Node

qualcomm sd820_firmwareMatch-

AND

qualcomm sd820Match-

Node

qualcomm sd820a_firmwareMatch-

AND

qualcomm sd820aMatch-

Node

qualcomm sd835_firmwareMatch-

AND

qualcomm sd835Match-

Node

qualcomm sd845_firmwareMatch-

AND

qualcomm sd845Match-

Node

qualcomm sd850_firmwareMatch-

AND

qualcomm sd850Match-

Node

qualcomm sda660_firmwareMatch-

AND

qualcomm sda660Match-

Node

qualcomm sdm429_firmwareMatch-

AND

qualcomm sdm429Match-

Node

qualcomm sdm439_firmwareMatch-

AND

qualcomm sdm439Match-

Node

qualcomm sdm630_firmwareMatch-

AND

qualcomm sdm630Match-

Node

qualcomm sdm632_firmwareMatch-

AND

qualcomm sdm632Match-

Node

qualcomm sdm636_firmwareMatch-

AND

qualcomm sdm636Match-

Node

qualcomm sdm660_firmwareMatch-

AND

qualcomm sdm660Match-

Node

qualcomm sdx20_firmwareMatch-

AND

qualcomm sdx20Match-

Node

qualcomm snapdragon_high_med_2016_firmwareMatch-

AND

qualcomm snapdragon_high_med_2016Match-

[
  {
    "product": "Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "MDM9206, MDM9607, MDM9615, MDM9640, MDM9650, MDM9655, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, SDX20, Snapdragon_High_Med_2016"
      }
    ]
  }
]

Source	Link
qualcomm	www.qualcomm.com/company/product-security/bulletins
securityfocus	www.securityfocus.com/bid/106128

Parameter	Position	Path	Description	CWE
XML data	request body	/deviceprogrammer/firehose	Malformed XML data to deviceprogrammer/firehose may cause an out-of-bounds buffer write that can fill a region of memory with 0x20.	CWE-129

21 Nov 2024 03:43Current

7.8High risk

Vulners AI Score7.8

CVSS 27.2

CVSS 37.8

EPSS0.00038

CWE-129