CVE-2018-11842

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, during wlan association, driver allocates memory. In case the mem allocation fails driver does a mem free though the memory was not allocated.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

No affected versions have been published.

Timeline

Published
Sep 18, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-118437.8In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack fo check on return value inCVE-2018-118455.5Usage of non-time-constant comparison functions can lead to information leakage through side channel analysis in Snapdragon Auto, SnapdragonCVE-2018-118464.7The use of a non-time-constant memory comparison operation can lead to timing/side channel attacks in Snapdragon Mobile in version SD 210/SDCVE-2018-118477.8Malicious TA can tag QSEE kernel memory and map to EL0, there by corrupting the physical memory as well it can be used to corrupt the QSEE kCVE-2018-118497.8Lack of check on out of range of bssid parameter When processing scan start command will lead to buffer flow in Snapdragon Automobile, SnapdCVE-2018-11856.7An issue was discovered in EMC RecoverPoint for Virtual Machines versions prior to 5.1.1, EMC RecoverPoint version 5.1.0.0, and EMC RecoverPCVE-2018-118507.8Lack of check on remaining length parameter When processing scan start command will lead to buffer flow in Snapdragon Automobile, SnapdragonCVE-2018-118517.8In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of check on input received CVE-2018-118527.8In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, improper check In the WMA API foCVE-2018-118537.8Lack of check on out of range for channels When processing channel list set command will lead to buffer flow in Snapdragon Mobile, SnapdragoCVE-2018-118547.8Lack of check of valid length of input parameter may cause buffer overwrite in WLAN in Snapdragon Mobile in version SD 835, SD 845, SD 850, CVE-2018-118557.8If an end user makes use of SCP11 sample OCE code without modification it could lead to a buffer overflow when transmitting a CAPDU in Snapd
CVE-2018-11842: High severity, CVSS 7.8 | Vulnix