{"id":"CVE-2018-11895","state":"PUBLISHED","title":"In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, improper length check Validation in WLAN function can lead to driver wri","description":"In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, improper length check Validation in WLAN function can lead to driver writes the default rsn capabilities to the memory not allocated to the frame.","publishedAt":"2018-09-19T14:00:00.000Z","updatedAt":"2024-08-05T08:24:02.891Z","severity":null,"assigner":"qualcomm","products":["Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android"],"affected":[{"vendor":"Qualcomm, Inc.","product":"Android for MSM, Firefox OS for MSM, QRD Android","versions":[{"version":"All Android releases from CAF using the Linux kernel","status":"affected"}]}],"references":["https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin","https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=3dfe93028c0c6564db7aa4607a85413195925aa4","http://www.securityfocus.com/bid/107770"],"weaknesses":[],"ingestedAt":"2026-10-29T19:44:13.163Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2018/11xxx/CVE-2018-11895.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2018-11895","state":"PUBLISHED","datePublished":"2018-09-19T14:00:00.000Z","dateUpdated":"2024-08-05T08:24:02.891Z","assignerShortName":"qualcomm","assignerOrgId":"2cfc7d3e-20d3-47ac-8db7-1b7285aff15f","dateReserved":"2018-06-07T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, improper length check Validation in WLAN function can lead to driver writes the default rsn capabilities to the memory not allocated to the frame."}],"affected":[{"vendor":"Qualcomm, Inc.","product":"Android for MSM, Firefox OS for MSM, QRD Android","versions":[{"version":"All Android releases from CAF using the Linux kernel","status":"affected"}]}],"references":[{"url":"https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin","tags":["x_refsource_CONFIRM"]},{"url":"https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=3dfe93028c0c6564db7aa4607a85413195925aa4","tags":["x_refsource_CONFIRM"]},{"url":"http://www.securityfocus.com/bid/107770","name":"107770","tags":["vdb-entry","x_refsource_BID"]}],"problemTypes":[{"descriptions":[{"description":"Potential Buffer Overflow in WLAN","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"qualcomm","dateUpdated":"2019-04-05T06:06:09.000Z","orgId":"2cfc7d3e-20d3-47ac-8db7-1b7285aff15f"},"datePublic":"2018-09-04T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"product-security@qualcomm.com","ID":"CVE-2018-11895","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Android for MSM, Firefox OS for MSM, QRD Android","version":{"version_data":[{"version_value":"All Android releases from CAF using the Linux kernel"}]}}]},"vendor_name":"Qualcomm, Inc."}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, improper length check Validation in WLAN function can lead to driver writes the default rsn capabilities to the memory not allocated to the frame."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Potential Buffer Overflow in WLAN"}]}]},"references":{"reference_data":[{"name":"https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin","refsource":"CONFIRM","url":"https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin"},{"name":"https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=3dfe93028c0c6564db7aa4607a85413195925aa4","refsource":"CONFIRM","url":"https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=3dfe93028c0c6564db7aa4607a85413195925aa4"},{"name":"107770","refsource":"BID","url":"http://www.securityfocus.com/bid/107770"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=3dfe93028c0c6564db7aa4607a85413195925aa4","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.securityfocus.com/bid/107770","name":"107770","tags":["vdb-entry","x_refsource_BID","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-05T08:24:02.891Z"}}]}}}