VulnerabilityModified

CVE-2018-13886

CRITICAL 9.8EPSS 1.11%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (1.11%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Unchecked OTA field in GNSS XTRA3 lead to integer overflow and then buffer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9615, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 600, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDM439, SDM630, SDM660, SDX20, SM7150, Snapdragon_High_Med_2016, SXR1130

CVSS 3.0: 9.8 CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: 1.11% probability · 64th percentile
CISA KEV: Not listed
Weakness: CWE-190
Affected: qualcomm/mdm9150 firmware · qualcomm/mdm9206 firmware · qualcomm/mdm9607 firmware · qualcomm/mdm9615 firmware · qualcomm/mdm9635m firmware · qualcomm/mdm9640 firmware · qualcomm/mdm9650 firmware · qualcomm/mdm9655 firmware · qualcomm/msm8909w firmware · qualcomm/msm8996au firmware · qualcomm/qcs605 firmware · qualcomm/qm215 firmware · qualcomm/sd 210 firmware · qualcomm/sd 212 firmware · qualcomm/sd 205 firmware · qualcomm/sd 410 firmware · qualcomm/sd 412 firmware · qualcomm/sd 425 firmware · qualcomm/sd 427 firmware · qualcomm/sd 430 firmware · +30 more
Source: product-security@qualcomm.com

References

https://www.qualcomm.com/company/product-security/bulletins#_CVE-2018-13886Vendor Advisory
https://www.qualcomm.com/company/product-security/bulletins#_CVE-2018-13886Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.