High severity7.8NVD Advisory· Published Oct 29, 2018· Updated Jun 17, 2026
CVE-2018-11870
CVE-2018-11870
Description
Buffer overwrite can occur when the legacy rates count received from the host is not checked against the maximum number of legacy rates in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MSM8996AU, QCA4531, QCA6174A, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9378, QCA9379, SD 210/SD 212/SD 205, SD 425, SD 600, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDX20.
Affected products
34- cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:mdm9635m_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:mdm9640_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:qca4531_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:qca6174a_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qca6574au_firmware:-:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:qualcomm:qca6574au_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:qca6584au_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:qca6584_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:qca9377_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:qca9378_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:qca9379_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sd_600_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sd_810_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sd_820a_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sd_850_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sda660_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sdx20_firmware:-:*:*:*:*:*:*:*
- Range: MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MSM8996AU, QCA4531, QCA6174A, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9378, QCA9379, SD 210/SD 212/SD 205, SD 425, SD 600, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDX20
- Range: MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MSM8996AU, QCA4531, QCA6174A, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9378, QCA9379, SD 210/SD 212/SD 205, SD 425, SD 600, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDX20
- Range: MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MSM8996AU, QCA4531, QCA6174A, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9378, QCA9379, SD 210/SD 212/SD 205, SD 425, SD 600, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDX20
- Qualcomm, Inc./Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wearv5Range: MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MSM8996AU, QCA4531, QCA6174A, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9378, QCA9379, SD 210/SD 212/SD 205, SD 425, SD 600, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDX20
Patches
Vulnerability mechanics
References
2- www.qualcomm.com/company/product-security/bulletinsnvdVendor Advisory
- www.securityfocus.com/bid/107681nvd
News mentions
0No linked articles in our index yet.