CVE-2018-11859

Buffer overwrite can happen in WLAN due to lack of validation of the input length in Snapdragon Mobile in version SD 845, SD 850...

CVE-2018-11858

When processing IE set command, buffer overwrite may occur due to lack of input validation of the IE length in Snapdragon Mobile in version SD 835, SD 845, SD 850...

Out-of-bounds

Incorrect bound check can lead to potential buffer overwrite in WLAN function in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660...

Input validation

Improper input validation leads to buffer overwrite in the WLAN function that handles WMI commands in Snapdragon Mobile in version SD 845, SD 850, SDA660...

Command injection

When processing IE set command, buffer overwrite may occur due to lack of input validation of the IE length in Snapdragon Mobile in version SD 835, SD 845, SD 850...

Input validation

Improper input validation leads to buffer overwrite in the WLAN function that handles WLAN roam buffer in Snapdragon Mobile in version SD 845...

Design/Logic Flaw

When the buffer length passed is very large, bounds check could be bypassed leading to potential buffer overwrite in Snapdragon Mobile in version SD 845...

Out-of-bounds

Incorrect bound check can lead to potential buffer overwrite in WLAN controller in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660...

Input validation

Improper input validation leads to buffer overwrite in the WLAN function that handles WMI commands in Snapdragon Mobile in version SD 835, SD 845, SD 850...

CVE-2018-11856

Improper input validation leads to buffer overwrite in the WLAN function that handles WMI commands in Snapdragon Mobile in version SD 835, SD 845, SD 850...

CVE-2018-11879

When the buffer length passed is very large, bounds check could be bypassed leading to potential buffer overwrite in Snapdragon Mobile in version SD 845...

CVE-2018-11882

Incorrect bound check can lead to potential buffer overwrite in WLAN controller in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660...

CVE-2018-11856

Improper input validation leads to buffer overwrite in the WLAN function that handles WMI commands in Snapdragon Mobile in version SD 835, SD 845, SD 850...

CVE-2018-11880

CVE-2018-11880 affects Qualcomm Snapdragon Mobile WLAN functionality. The root cause is an incorrect bound check that can lead to a buffer overwrite in the WLAN function on devices using SD 835, SD 845, SD 850, and SDA660 chipsets. The entry notes local access as the attack vector with a low atta...

CVE-2018-11877

The CVE-2018-11877 issue affects Qualcomm Snapdragon Mobile devices (SD 835, SD 845, SD 850, SDA660) with WLAN. The root cause is a bounds-check bypass when a very large buffer length is passed in WLAN, which could lead to a buffer overwrite. The available documentation confirms the affected comp...

CVE-2018-11879

CVE-2018-11879 affects Qualcomm Snapdragon Mobile SD 845. The vulnerability arises when an excessively large buffer length bypasses bounds checks, potentially allowing a buffer overwrite. Severity/metrics from NVD indicate HIGH impact with LOCAL exploitability and complete confidentiality/integri...

CVE-2018-11872

Improper input validation leads to buffer overwrite in the WLAN function that handles WMI commands in Snapdragon Mobile in version SD 845, SD 850, SDA660...

CVE-2018-11871

Buffer overwrite can happen in WLAN function while processing set pdev parameter command due to lack of input validation in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version IPQ4019, IPQ8064, IPQ8074, MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MSM8996AU, QCA6174A, QCA6564,...

CVE-2018-11882

CVE-2018-11882 concerns a vulnerability in the WLAN controller of Qualcomm Snapdragon Mobile on the SD 835/845/850 and SDA660 families. The root cause is an incorrect bound check that can lead to a potential buffer overwrite. The connected documents confirm the affected hardware/SoCs and the gene...

CVE-2018-11873

CVE-2018-11873 affects Qualcomm Snapdragon Mobile SD 845 WLAN roam-buffer handling. The issue arises from improper input validation, enabling a buffer overwrite in the WLAN component. CVSS data in the NVD indicates local access, low attack complexity, no authentication, and high impact on confide...