VulnerabilityModified

CVE-2018-11925

HIGH 7.8EPSS 0.21%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.21%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Data length received from firmware is not validated against the max allowed size which can result in buffer overflow. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ8064, IPQ8074, MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, QCS605, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 712 / SD 710 / SD 670, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM630, SDM660, SDX20, SDX24

CVSS 3.0: 7.8 HIGHCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS: 0.21% probability · 11th percentile
CISA KEV: Not listed
Weakness: CWE-190
Affected: qualcomm/ipq4019 firmware · qualcomm/ipq8064 firmware · qualcomm/ipq8074 firmware · qualcomm/mdm9150 firmware · qualcomm/mdm9206 firmware · qualcomm/mdm9607 firmware · qualcomm/mdm9640 firmware · qualcomm/mdm9650 firmware · qualcomm/qcs605 firmware · qualcomm/sd 425 firmware · qualcomm/sd 427 firmware · qualcomm/sd 430 firmware · qualcomm/sd 435 firmware · qualcomm/sd 450 firmware · qualcomm/sd 625 firmware · qualcomm/sd 636 firmware · qualcomm/sd 712 firmware · qualcomm/sd 710 firmware · qualcomm/sd 670 firmware · qualcomm/sd 835 firmware · +8 more
Source: product-security@qualcomm.com

References

https://www.codeaurora.org/security-bulletin/2019/04/01/april-2019-code-aurora-security-bulletinPatch, Third Party Advisory
https://www.codeaurora.org/security-bulletin/2019/04/01/april-2019-code-aurora-security-bulletinPatch, Third Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.