CVE-2018-11816

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Crafted Binder Request Causes Heap UAF in MediaServer

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

VendorProductVersions
Qualcomm, Inc.Snapdragon9206 LTE Modem; APQ8016; APQ8017; APQ8039; APQ8052; APQ8056; APQ8076; AQT1000; AR6003; SD660; SD670; SD820; SD821; SD835
qualcomm9206_lte_modem_firmware<= *
qualcommapq8016_firmware<= *
qualcommapq8017_firmware<= *
qualcommapq8039_firmware<= *
qualcommapq8052_firmware<= *
qualcommapq8056_firmware<= *
qualcommapq8076_firmware<= *
qualcommaqt1000_firmware<= *
qualcommar6003_firmware<= *
qualcommsd660_firmware<= *
qualcommsd670_firmware<= *
qualcommsd820_firmware<= *
qualcommsd821_firmware<= *
qualcommsd835_firmware<= *

References

Timeline

Published
Nov 26, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2018

CVE-2018-118187.0In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, LUT configuration is passed downCVE-2018-118197.8Use after issue in WLAN function due to multiple ACS scan requests at a time in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon IndustrCVE-2018-11827.8An issue was discovered in EMC RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2, all patch levels (hardware appliance and softwarCVE-2018-118205.5Use of non-time constant memcmp function creates side channel that leaks information and leads to cryptographic issues in Snapdragon Auto, SCVE-2018-118217.8Possible integer overflow may happen in WLAN during memory allocation in Snapdragon Mobile, Snapdragon Wear in version IPQ8074, MDM9206, MDMCVE-2018-118227.8A possible integer overflow may happen in WLAN during memory allocation in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660CVE-2018-118237.8In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, freeing device memory in driver pCVE-2018-118247.8A stack-based buffer overflow can occur in a firmware routine in Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, SDCVE-2018-118267.8In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of check on integer overfloCVE-2018-118277.8In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, improper validation of array indCVE-2018-118287.5When FW tries to get random mac address generated from new SW RNG and ADC values read are constant then DUT get struck in loop while trying CVE-2018-11839.8In Dell EMC Unisphere for VMAX Virtual Appliance versions prior to 8.4.0.8, Dell EMC Solutions Enabler Virtual Appliance versions prior to 8
CVE-2018-11816: High severity, CVSS 7.8 | Vulnix