7.8
High
CVE-2018-11816 Crafted Binder Request Causes Heap UAF in MediaServer
Description
Crafted Binder Request Causes Heap UAF in MediaServer
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Snapdragon | Versions not published | |
| 9206_lte_modem_firmware | Versions not published | |
| apq8016_firmware | Versions not published | |
| apq8017_firmware | Versions not published | |
| apq8039_firmware | Versions not published | |
| apq8052_firmware | Versions not published | |
| apq8056_firmware | Versions not published | |
| apq8076_firmware | Versions not published | |
| aqt1000_firmware | Versions not published |
Show the 6 other branches Hide the 6 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| ar6003_firmware | Versions not published | |
| sd660_firmware | Versions not published | |
| sd670_firmware | Versions not published | |
| sd820_firmware | Versions not published | |
| sd821_firmware | Versions not published | |
| sd835_firmware | Versions not published |
References
- docs.qualcomm.com docs.qualcomm.com
Timeline
- Published
- Last modified
Other CVEs of Snapdragon
The 997 CVEs of Snapdragon →
CVE-2026-57559
Memory corruption while processing service requests
7.8
High
CVE-2026-57555
Memory Corruption when executing system service routines due to improper handling of user input buffers
7.8
High
CVE-2026-57554
Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC…
7.8
High
CVE-2026-57546
Transient DOS when processing a continuous receive command with a zero-sized global configuration override
7.5
High