428 matches found
Input validation
Improper input validation leads to buffer overwrite in the WLAN function that handles WMI commands in Snapdragon Mobile in version SD 835, SD 845, SD 850...
CVE-2018-11856
Improper input validation leads to buffer overwrite in the WLAN function that handles WMI commands in Snapdragon Mobile in version SD 835, SD 845, SD 850...
Design/Logic Flaw
When the buffer length passed is very large, bounds check could be bypassed leading to potential buffer overwrite in Snapdragon Mobile in version SD 845...
Out-of-bounds
Incorrect bound check can lead to potential buffer overwrite in WLAN controller in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660...
CVE-2018-11880
CVE-2018-11880 affects Qualcomm Snapdragon Mobile WLAN functionality. The root cause is an incorrect bound check that can lead to a buffer overwrite in the WLAN function on devices using SD 835, SD 845, SD 850, and SDA660 chipsets. The entry notes local access as the attack vector with a low atta...
CVE-2018-11856
Improper input validation leads to buffer overwrite in the WLAN function that handles WMI commands in Snapdragon Mobile in version SD 835, SD 845, SD 850...
CVE-2018-11882
Incorrect bound check can lead to potential buffer overwrite in WLAN controller in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660...
CVE-2018-11879
When the buffer length passed is very large, bounds check could be bypassed leading to potential buffer overwrite in Snapdragon Mobile in version SD 845...
CVE-2018-11870
Technical details for CVE-2018-11870 are not publicly available in the provided documents. No affected products, impact, or remediation are specified here. Monitor for updates from the provided sources.
CVE-2018-11873
CVE-2018-11873 affects Qualcomm Snapdragon Mobile SD 845 WLAN roam-buffer handling. The issue arises from improper input validation, enabling a buffer overwrite in the WLAN component. CVSS data in the NVD indicates local access, low attack complexity, no authentication, and high impact on confide...
CVE-2018-11882
CVE-2018-11882 concerns a vulnerability in the WLAN controller of Qualcomm Snapdragon Mobile on the SD 835/845/850 and SDA660 families. The root cause is an incorrect bound check that can lead to a potential buffer overwrite. The connected documents confirm the affected hardware/SoCs and the gene...
CVE-2018-11856
CVE-2018-11856 is a Qualcomm Snapdragon vulnerability describing improper input validation that leads to a buffer overwrite in the WLAN/WMI handling function on Snapdragon Mobile platforms (SD 835, 845, 850). The issue is triggered within the WLAN component during processing of WMI commands. The ...
CVE-2018-11872
Improper input validation leads to buffer overwrite in the WLAN function that handles WMI commands in Snapdragon Mobile in version SD 845, SD 850, SDA660...
CVE-2018-11859
The CVE-2018-11859 entry concerns a buffer overwrite in the WLAN path of Qualcomm Snapdragon Mobile platforms (SD 845 and SD 850). The root cause is input length validation failure in the WLAN host component, enabling a local attacker to trigger memory corruption within the affected device. The v...
CVE-2018-11879
CVE-2018-11879 affects Qualcomm Snapdragon Mobile SD 845. The vulnerability arises when an excessively large buffer length bypasses bounds checks, potentially allowing a buffer overwrite. Severity/metrics from NVD indicate HIGH impact with LOCAL exploitability and complete confidentiality/integri...
CVE-2018-11871
Buffer overwrite can happen in WLAN function while processing set pdev parameter command due to lack of input validation in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version IPQ4019, IPQ8064, IPQ8074, MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MSM8996AU, QCA6174A, QCA6564,...
CVE-2018-11877
The CVE-2018-11877 issue affects Qualcomm Snapdragon Mobile devices (SD 835, SD 845, SD 850, SDA660) with WLAN. The root cause is a bounds-check bypass when a very large buffer length is passed in WLAN, which could lead to a buffer overwrite. The available documentation confirms the affected comp...
CVE-2018-11858
CVE-2018-11858 affects Qualcomm Snapdragon Mobile (SD 835, 845, 850). The issue arises when processing the IE set command, where insufficient input validation of the IE length can cause a buffer overwrite in a vulnerable component. The vulnerability is classified as local with low privileges requ...
CVE-2018-11872
CVE-2018-11872 affects Qualcomm Snapdragon Mobile WLAN code that processes WMI commands. The root cause is improper input validation, leading to a buffer overwrite in the WLAN function. Affected devices are Snapdragon platforms SD 845, SD 850, and SDA660. The available connected sources corrobora...