CVE-2018-11879 — Integer Overflow or Wraparound in INC Snapdragon Mobile

CWE-190 — Integer Overflow or Wraparound3 documents3 sources
Severity
7.8HIGHNVD
EPSS
0.0%
top 90.33%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Qualcomm INC Snapdragon MobileGoogle Android
Timeline
PublishedOct 29
Latest updateMay 14

Description

When the buffer length passed is very large, bounds check could be bypassed leading to potential buffer overwrite in Snapdragon Mobile in version SD 845

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

🔴Vulnerability Details

1
GHSA
GHSA-hf5r-cgmf-m62g: When the buffer length passed is very large, bounds check could be bypassed leading to potential buffer overwrite in Snapdragon Mobile in version SD 8↗2022-05-14
▶

📋Vendor Advisories

1
Android
CVE-2018-11879: Closed-source component↗2019-04-01
▶