ByteOS Network

CVE Vulnerability Details :

CVE-2018-11860

PUBLISHED

More Info Official Page

Assigner-qualcomm

Assigner Org ID-2cfc7d3e-20d3-47ac-8db7-1b7285aff15f

Published At-18 Sep, 2018 | 18:00

Updated At-05 Aug, 2024 | 08:24

▼CVE Numbering Authority (CNA)

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, a potential buffer over flow could occur while processing the ndp event due to lack of check on the message length.

Affected Products

Vendor

Qualcomm Technologies, Inc.

Product

Android for MSM, Firefox OS for MSM, QRD Android

Versions

Affected

All Android releases from CAF using the Linux kernel

Problem Types

Type	CWE ID	Description
text	N/A	Buffer Copy Without Checking Size of Input in WLAN

References

Hyperlink	Resource
https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=7a8639875bb01bca2dcac7bda9e5d986fbf8683f	x_refsource_CONFIRM
https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin	x_refsource_CONFIRM
http://www.securityfocus.com/bid/107770	vdb-entry x_refsource_BID

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=7a8639875bb01bca2dcac7bda9e5d986fbf8683f	x_refsource_CONFIRM x_transferred
https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin	x_refsource_CONFIRM x_transferred
http://www.securityfocus.com/bid/107770	vdb-entry x_refsource_BID x_transferred

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References