New MCP server — Bring vulnerability intelligence into your AI
Back to feed

CVE-2018-11285

NVDCIRCLENISA

EUVD-2018-3325 · Published Sep 20, 2018

In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, SDM710, SDX20, Snapdragon_High_Med_2016, while parsing FLAC file with corrupted picture block, a buffer over-read can occur.

Technologies

Qualcomm Sd210Qualcomm Sd650 FirmwareQualcomm Sd615Qualcomm Sdm636Qualcomm Mdm9650Qualcomm Sdm632Qualcomm Sdx20 FirmwareQualcomm Sd212 FirmwareQualcomm Msm8996Au FirmwareQualcomm Sd212Qualcomm Sd450Qualcomm Sd820A FirmwareQualcomm Mdm9607Qualcomm Sd450 FirmwareQualcomm Sda660 FirmwareQualcomm Sdm429 FirmwareQualcomm Sd430Qualcomm Sdm630 FirmwareQualcomm Sdx20Qualcomm Sd616 FirmwareQualcomm Sda660Qualcomm Sdm439 FirmwareQualcomm Sdm660 FirmwareQualcomm Sd835Qualcomm Sd430 FirmwareQualcomm Sd425 FirmwareQualcomm Mdm9206Qualcomm Mdm9206 FirmwareQualcomm Sdm632 FirmwareQualcomm Sd210 FirmwareQualcomm Sd625 FirmwareQualcomm Sd625Qualcomm Sd415 FirmwareQualcomm Sd835 FirmwareQualcomm Sd616Qualcomm Sd615 FirmwareQualcomm Sd845Qualcomm Sd845 FirmwareQualcomm Sdm630Qualcomm Sd435 FirmwareQualcomm Sdm660Qualcomm Msm8909W FirmwareQualcomm Sd650Qualcomm Sdm710 FirmwareQualcomm Sd205 FirmwareQualcomm Mdm9650 FirmwareQualcomm Sd427 FirmwareQualcomm Sd810Qualcomm Msm8996AuQualcomm Sd820 FirmwareQualcomm Sd820Qualcomm Sdm429Qualcomm Msm8909WQualcomm Sdm710Qualcomm Sdm439Qualcomm Sd425Qualcomm Sd205Qualcomm Sd435Qualcomm Sd415Qualcomm Sd810 FirmwareQualcomm Sd820AQualcomm Mdm9607 FirmwareQualcomm Sd427Qualcomm Sdm636 Firmware

Weaknesses

CWE-125

CVSS scores

  • v3.07.8CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
  • v2.09.3AV:N/AC:M/Au:N/C:C/I:C/A:C

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

Initial Access

References

Potentially impacted assets

See if this affects your attack surface

Take 15 minutes to discover our platform with our experts

PatrowlIntel platform screenshot