CVE-2018-13886

CVE numbers: CVE-2018-13886 [Bulletin-CVE-2018-13886]
Coordinated disclosure?: unknown
Categories: Qualcomm closed-source components
Details: Unchecked OTA field in GNSS XTRA3 lead to integer overflow and then buffer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9615, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 600, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDM439, SDM630, SDM660, SDX20, SM7150, Snapdragon_High_Med_2016, SXR1130 [NIST-CVE-2018-13886]
Discovered by: on: Unknown
Reported on: 2019-04-01 [Bulletin-CVE-2018-13886]
Fixed on: Unknown
Fix released on: 2019-04-05 [Bulletin-CVE-2018-13886]
Affected versions: regex:
Affected devices:
Affected manufacturers: Qualcomm [Bulletin-CVE-2018-13886]
Fixed versions:
Submission: by: Daniel Carter, on: 2019-07-24

AndroidVulnerabilities.org