CVE-2018-11955

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon Auto versions MDM9150 Qualcomm Snapdragon Consumer Electronics Connectivity versions MDM9150 Qualcomm Snapdragon Consumer IOT versions MDM9150 Qualcomm Snapdragon Industrial IOT versions MDM9150 Qualcomm Snapdragon IoT versions MDM9150 Qualcomm Snapdragon Mobile versions MDM9150 Qualcomm Snapdragon Voice & Music versions MDM9150 Qualcomm Snapdragon Wearables versions MDM9150 Qualcomm MDM9206 Qualcomm MDM9607 Qualcomm MDM9640 Qualcomm MDM9650 Qualcomm MSM8909W Qualcomm MSM8996AU Qualcomm QCA6174A Qualcomm QCA6574AU Qualcomm QCA9377 Qualcomm QCA9379 Qualcomm QCS405 Qualcomm QCS605 Qualcomm 215 Qualcomm SD 210 Qualcomm SD 212 Qualcomm SD 205 Qualcomm SD 425 Qualcomm SD 427 Qualcomm SD 430 Qualcomm SD 435 Qualcomm SD 439 Qualcomm SD 429 Qualcomm SD 450 Qualcomm SD 600 Qualcomm SD 615 Qualcomm SD 16 Qualcomm SD 415 Qualcomm SD 625 Qualcomm SD 632 Qualcomm SD 636 Qualcomm SD 650 Qualcomm SD 52 Qualcomm SD 665 Qualcomm SD 712 Qualcomm SD 710 Qualcomm SD 670 Qualcomm SD 730 Qualcomm SD 820 Qualcomm SD 820A Qualcomm SD 835 Qualcomm SD 845 Qualcomm SD 850 Qualcomm SD 855 Qualcomm SDM439 Qualcomm SDM660 Qualcomm SDX20 Qualcomm SDX24

Description A lack of check on the length of the reason-code fetched from the payload may lead to a driver accessing memory not allocated to the frame, resulting in an out-of-bound read.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.