CVE-2018-13914
Summary
| CVE | CVE-2018-13914 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2019-02-25 22:29:00 UTC |
| Updated | 2019-02-26 20:15:00 UTC |
| Description | Lack of input validation for data received from user space can lead to an out of bound array issue in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in version MDM9150, MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 636, SD 820A, SD 835, SDM630, SDM660, SDX20. |
Risk And Classification
Problem Types: CWE-119
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Qualcomm | Mdm9150 | - | All | All | All |
| Hardware | Qualcomm | Mdm9150 | - | All | All | All |
| Operating System | Qualcomm | Mdm9150 Firmware | - | All | All | All |
| Operating System | Qualcomm | Mdm9150 Firmware | - | All | All | All |
| Hardware | Qualcomm | Mdm9206 | - | All | All | All |
| Hardware | Qualcomm | Mdm9206 | - | All | All | All |
| Operating System | Qualcomm | Mdm9206 Firmware | - | All | All | All |
| Operating System | Qualcomm | Mdm9206 Firmware | - | All | All | All |
| Hardware | Qualcomm | Mdm9607 | - | All | All | All |
| Hardware | Qualcomm | Mdm9607 | - | All | All | All |
| Operating System | Qualcomm | Mdm9607 Firmware | - | All | All | All |
| Operating System | Qualcomm | Mdm9607 Firmware | - | All | All | All |
| Hardware | Qualcomm | Mdm9650 | - | All | All | All |
| Hardware | Qualcomm | Mdm9650 | - | All | All | All |
| Operating System | Qualcomm | Mdm9650 Firmware | - | All | All | All |
| Operating System | Qualcomm | Mdm9650 Firmware | - | All | All | All |
| Hardware | Qualcomm | Msm8909w | - | All | All | All |
| Hardware | Qualcomm | Msm8909w | - | All | All | All |
| Operating System | Qualcomm | Msm8909w Firmware | - | All | All | All |
| Operating System | Qualcomm | Msm8909w Firmware | - | All | All | All |
| Hardware | Qualcomm | Msm8996au | - | All | All | All |
| Hardware | Qualcomm | Msm8996au | - | All | All | All |
| Operating System | Qualcomm | Msm8996au Firmware | - | All | All | All |
| Operating System | Qualcomm | Msm8996au Firmware | - | All | All | All |
| Hardware | Qualcomm | Sdm630 | - | All | All | All |
| Hardware | Qualcomm | Sdm630 | - | All | All | All |
| Operating System | Qualcomm | Sdm630 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sdm630 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sdm660 | - | All | All | All |
| Hardware | Qualcomm | Sdm660 | - | All | All | All |
| Operating System | Qualcomm | Sdm660 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sdm660 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sdx20 | - | All | All | All |
| Hardware | Qualcomm | Sdx20 | - | All | All | All |
| Operating System | Qualcomm | Sdx20 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sdx20 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sd 205 | - | All | All | All |
| Hardware | Qualcomm | Sd 205 | - | All | All | All |
| Operating System | Qualcomm | Sd 205 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 205 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sd 210 | - | All | All | All |
| Hardware | Qualcomm | Sd 210 | - | All | All | All |
| Operating System | Qualcomm | Sd 210 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 210 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sd 212 | - | All | All | All |
| Hardware | Qualcomm | Sd 212 | - | All | All | All |
| Operating System | Qualcomm | Sd 212 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 212 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sd 636 | - | All | All | All |
| Hardware | Qualcomm | Sd 636 | - | All | All | All |
| Operating System | Qualcomm | Sd 636 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 636 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sd 820a | - | All | All | All |
| Hardware | Qualcomm | Sd 820a | - | All | All | All |
| Operating System | Qualcomm | Sd 820a Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 820a Firmware | - | All | All | All |
| Hardware | Qualcomm | Sd 835 | - | All | All | All |
| Hardware | Qualcomm | Sd 835 | - | All | All | All |
| Operating System | Qualcomm | Sd 835 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 835 Firmware | - | All | All | All |
| Hardware | Qualcomm | Snapdragon Auto | - | All | All | All |
| Hardware | Qualcomm | Snapdragon Auto | - | All | All | All |
| Operating System | Qualcomm | Snapdragon Auto Firmware | - | All | All | All |
| Operating System | Qualcomm | Snapdragon Auto Firmware | - | All | All | All |
| Hardware | Qualcomm | Snapdragon Consumer Internet Of Things | - | All | All | All |
| Hardware | Qualcomm | Snapdragon Consumer Internet Of Things | - | All | All | All |
| Operating System | Qualcomm | Snapdragon Consumer Internet Of Things Firmware | - | All | All | All |
| Operating System | Qualcomm | Snapdragon Consumer Internet Of Things Firmware | - | All | All | All |
| Hardware | Qualcomm | Snapdragon Industrial Internet Of Things | - | All | All | All |
| Hardware | Qualcomm | Snapdragon Industrial Internet Of Things | - | All | All | All |
| Operating System | Qualcomm | Snapdragon Industrial Internet Of Things Firmware | - | All | All | All |
| Operating System | Qualcomm | Snapdragon Industrial Internet Of Things Firmware | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| February 2019 Code Aurora Security Bulletin - Code Aurora | CONFIRM | www.codeaurora.org | Patch, Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.