CVE-2018-11264

2018-11-2815:00:00

qualcomm

www.cve.org

0.0004 Low

EPSS

Percentile

12.7%

JSON

Possible buffer overflow in Ontario fingerprint code due to lack of input validation for the parameters coming into TZ from HLOS in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SDA660.

CNA Affected

[
  {
    "product": "Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SDA660"
      }
    ]
  }
]

References

www.securityfocus.com/bid/105838

www.qualcomm.com/company/product-security/bulletins

0.0004 Low

EPSS

Percentile

12.7%

JSON

Related for CVELIST:CVE-2018-11264