{ "dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": { "cveId": "CVE-2018-11816", "assignerOrgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", "state": "PUBLISHED", "assignerShortName": "qualcomm", "dateReserved": "2018-06-07T00:00:00.000Z", "datePublished": "2024-11-26T13:56:24.297Z", "dateUpdated": "2024-11-26T15:57:56.731Z" }, "containers": { "cna": { "affected": [ { "defaultStatus": "unaffected", "platforms": [ "Snapdragon Auto", "Snapdragon Consumer IOT", "Snapdragon Industrial IOT", "Snapdragon IoT", "Snapdragon Mobile", "Snapdragon Voice & Music", "Snapdragon Wearables" ], "product": "Snapdragon", "vendor": "Qualcomm, Inc.", "versions": [ { "status": "affected", "version": "9206 LTE Modem" }, { "status": "affected", "version": "APQ8016" }, { "status": "affected", "version": "APQ8017" }, { "status": "affected", "version": "APQ8039" }, { "status": "affected", "version": "APQ8052" }, { "status": "affected", "version": "APQ8056" }, { "status": "affected", "version": "APQ8076" }, { "status": "affected", "version": "AQT1000" }, { "status": "affected", "version": "AR6003" }, { "status": "affected", "version": "SD660" }, { "status": "affected", "version": "SD670" }, { "status": "affected", "version": "SD820" }, { "status": "affected", "version": "SD821" }, { "status": "affected", "version": "SD835" } ] } ], "descriptions": [ { "lang": "en", "value": "Crafted Binder Request Causes Heap UAF in MediaServer" } ], "metrics": [ { "cvssV3_1": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "format": "CVSS", "scenarios": [ { "lang": "en", "value": "GENERAL" } ] } ], "problemTypes": [ { "descriptions": [ { "cweId": "CWE-416", "description": "CWE-416 Use After Free", "lang": "en", "type": "CWE" } ] } ], "providerMetadata": { "orgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", "shortName": "qualcomm", "dateUpdated": "2024-11-26T13:56:24.297Z" }, "references": [ { "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2018-bulletin.html" } ], "title": "Use After Free in Video" }, "adp": [ { "metrics": [ { "other": { "type": "ssvc", "content": { "id": "CVE-2018-11816", "role": "CISA Coordinator", "options": [ { "Exploitation": "none" }, { "Automatable": "no" }, { "Technical Impact": "total" } ], "version": "2.0.3", "timestamp": "2024-11-26T14:50:03.524048Z" } } } ], "affected": [ { "cpes": [ "cpe:2.3:o:qualcomm:9206_lte_modem_firmware:-:*:*:*:*:*:*:*" ], "vendor": "qualcomm", "product": "9206_lte_modem_firmware", "versions": [ { "status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*" } ], "defaultStatus": "unknown" }, { "cpes": [ "cpe:2.3:o:qualcomm:apq8016_firmware:-:*:*:*:*:*:*:*" ], "vendor": "qualcomm", "product": "apq8016_firmware", "versions": [ { "status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*" } ], "defaultStatus": "unknown" }, { "cpes": [ "cpe:2.3:o:qualcomm:apq8017_firmware:-:*:*:*:*:*:*:*" ], "vendor": "qualcomm", "product": "apq8017_firmware", "versions": [ { "status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*" } ], "defaultStatus": "unknown" }, { "cpes": [ "cpe:2.3:o:qualcomm:apq8039_firmware:-:*:*:*:*:*:*:*" ], "vendor": "qualcomm", "product": "apq8039_firmware", "versions": [ { "status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*" } ], "defaultStatus": "unknown" }, { "cpes": [ "cpe:2.3:o:qualcomm:apq8052_firmware:-:*:*:*:*:*:*:*" ], "vendor": "qualcomm", "product": "apq8052_firmware", "versions": [ { "status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*" } ], "defaultStatus": "unknown" }, { "cpes": [ "cpe:2.3:o:qualcomm:apq8056_firmware:-:*:*:*:*:*:*:*" ], "vendor": "qualcomm", "product": "apq8056_firmware", "versions": [ { "status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*" } ], "defaultStatus": "unknown" }, { "cpes": [ "cpe:2.3:o:qualcomm:apq8076_firmware:-:*:*:*:*:*:*:*" ], "vendor": "qualcomm", "product": "apq8076_firmware", "versions": [ { "status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*" } ], "defaultStatus": "unknown" }, { "cpes": [ "cpe:2.3:o:qualcomm:aqt1000_firmware:-:*:*:*:*:*:*:*" ], "vendor": "qualcomm", "product": "aqt1000_firmware", "versions": [ { "status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*" } ], "defaultStatus": "unknown" }, { "cpes": [ "cpe:2.3:o:qualcomm:ar6003_firmware:-:*:*:*:*:*:*:*" ], "vendor": "qualcomm", "product": "ar6003_firmware", "versions": [ { "status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*" } ], "defaultStatus": "unknown" }, { "cpes": [ "cpe:2.3:o:qualcomm:sd660_firmware:-:*:*:*:*:*:*:*" ], "vendor": "qualcomm", "product": "sd660_firmware", "versions": [ { "status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*" } ], "defaultStatus": "unknown" }, { "cpes": [ "cpe:2.3:o:qualcomm:sd670_firmware:-:*:*:*:*:*:*:*" ], "vendor": "qualcomm", "product": "sd670_firmware", "versions": [ { "status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*" } ], "defaultStatus": "unknown" }, { "cpes": [ "cpe:2.3:o:qualcomm:sd820_firmware:-:*:*:*:*:*:*:*" ], "vendor": "qualcomm", "product": "sd820_firmware", "versions": [ { "status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*" } ], "defaultStatus": "unknown" }, { "cpes": [ "cpe:2.3:o:qualcomm:sd821_firmware:-:*:*:*:*:*:*:*" ], "vendor": "qualcomm", "product": "sd821_firmware", "versions": [ { "status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*" } ], "defaultStatus": "unknown" }, { "cpes": [ "cpe:2.3:o:qualcomm:sd835_firmware:-:*:*:*:*:*:*:*" ], "vendor": "qualcomm", "product": "sd835_firmware", "versions": [ { "status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*" } ], "defaultStatus": "unknown" } ], "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-26T15:57:56.731Z" } } ] } }