AndroidVulnerabilities.org

CVE-2018-13887

(json)

• CVE numbers: CVE-2018-13887 [Bulletin-CVE-2018-13887]
• Coordinated disclosure?: unknown
• Categories: Qualcomm closed-source components
• Details: Untrusted header fields in GNSS XTRA3 function can lead to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9635M, MDM9650, MDM9655, MSM8909W, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 600, SD 625, SD 632, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 835, SD 845 / SD 850, SDA660, SDM439, SDM630, SDM660, SDX20, SM7150, SXR1130 [NIST-CVE-2018-13887]
• Discovered by: on: Unknown
• Reported on: 2019-04-01 [Bulletin-CVE-2018-13887]
• Fixed on: Unknown
• Fix released on: 2019-04-05 [Bulletin-CVE-2018-13887]
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2018-13887]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-24