Not rated

CVE-2018-11925 Data length received from firmware is not validated against the max allowed size which can result in buffer overflow

Description

Data length received from firmware is not validated against the max allowed size which can result in buffer overflow. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ8064, IPQ8074, MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, QCS605, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 712 / SD 710 / SD 670, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM630, SDM660, SDX20, SDX24

Affected products and versions

Product	Affected versions	Fixed in
Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking	Versions not published

References

www.codeaurora.org www.codeaurora.org

Timeline

Published May 24, 2019
Last modified August 5, 2024

The 5 CVEs of Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking →

CVE-2019-14025 u'When a new session is created, Object is returned that contains TZ addresses and it get passed to HLOS as an handle to… Not rated CVE-2019-14030 The size of a buffer is determined by addition and multiplications operations that have the potential to overflow due to… Not rated CVE-2019-10612 UTCB object has a function pointer called by the reaper to deallocate its memory resources and this address can… Not rated CVE-2019-2249 Kernel can do a memory read from arbitrary address passed by user during execution of a syscall in Snapdragon Auto,… Not rated

Track this CVE