CVE-2018-11953

highPriorität · verfolgen · 39EPSS 0.009 · 61. PerzentilEUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.95% (61st) EPSS

CVSS 10 · high

Is it mine?

31 products

Prüfe deine Angriffsfläche

Who says so?

3 sources

cnnvd · enisa_euvd · nvd

EPSS · bewertet 2026-10-27

While processing ssid IE length from remote AP, possible out-of-bounds access may occur due to crafted ssid IE length in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 650/52, SD 820, SD 820A, SDM439, SDX20

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

10.0

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · high–critical · 9–10

v2.010highAV:N/AC:L/Au:N/C:C/I:C/A:Cprimary · NVD / NIST USAusnutzbarkeit 10 · Auswirkung 10

v3.09.8criticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USAusnutzbarkeit 3.9 · Auswirkung 5.9

v3.09criticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-125USprimär

betroffene Produkte (31)

Betroffene Produkte und Versionsbereiche.

Qualcomm, Inc. Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables≤ MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 650/52, SD 820, SD 820A, SDM439, SDX20enisa_euvdEU
qualcomm mdm9150 firmwarealle VersionennvdUScpe:2.3:o:qualcomm:mdm9150_firmware:*:*:*:*:*:*:*:*
qualcomm mdm9206 firmwarealle VersionennvdUScpe:2.3:o:qualcomm:mdm9206_firmware:*:*:*:*:*:*:*:*
qualcomm mdm9607 firmwarealle VersionennvdUScpe:2.3:o:qualcomm:mdm9607_firmware:*:*:*:*:*:*:*:*
qualcomm mdm9640 firmwarealle VersionennvdUScpe:2.3:o:qualcomm:mdm9640_firmware:*:*:*:*:*:*:*:*
qualcomm mdm9650 firmwarealle VersionennvdUScpe:2.3:o:qualcomm:mdm9650_firmware:*:*:*:*:*:*:*:*
qualcomm msm8909w firmwarealle VersionennvdUScpe:2.3:o:qualcomm:msm8909w_firmware:*:*:*:*:*:*:*:*
qualcomm msm8996au firmwarealle VersionennvdUScpe:2.3:o:qualcomm:msm8996au_firmware:*:*:*:*:*:*:*:*
qualcomm qca6174a firmwarealle VersionennvdUScpe:2.3:o:qualcomm:qca6174a_firmware:*:*:*:*:*:*:*:*
qualcomm qca6574au firmwarealle VersionennvdUScpe:2.3:o:qualcomm:qca6574au_firmware:*:*:*:*:*:*:*:*
qualcomm qca9377 firmwarealle VersionennvdUScpe:2.3:o:qualcomm:qca9377_firmware:*:*:*:*:*:*:*:*
qualcomm qca9379 firmwarealle VersionennvdUScpe:2.3:o:qualcomm:qca9379_firmware:*:*:*:*:*:*:*:*
qualcomm qm215 firmwarealle VersionennvdUScpe:2.3:o:qualcomm:qm215_firmware:*:*:*:*:*:*:*:*
qualcomm sd 205 firmwarealle VersionennvdUScpe:2.3:o:qualcomm:sd_205_firmware:*:*:*:*:*:*:*:*
qualcomm sd 210 firmwarealle VersionennvdUScpe:2.3:o:qualcomm:sd_210_firmware:*:*:*:*:*:*:*:*
qualcomm sd 212 firmwarealle VersionennvdUScpe:2.3:o:qualcomm:sd_212_firmware:*:*:*:*:*:*:*:*
qualcomm sd 415 firmwarealle VersionennvdUScpe:2.3:o:qualcomm:sd_415_firmware:*:*:*:*:*:*:*:*
qualcomm sd 425 firmwarealle VersionennvdUScpe:2.3:o:qualcomm:sd_425_firmware:*:*:*:*:*:*:*:*
qualcomm sd 429 firmwarealle VersionennvdUScpe:2.3:o:qualcomm:sd_429_firmware:*:*:*:*:*:*:*:*
qualcomm sd 439 firmwarealle VersionennvdUScpe:2.3:o:qualcomm:sd_439_firmware:*:*:*:*:*:*:*:*

20 von 31 angezeigt

auch bekannt als (3)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd nvd NVD CVE.org MITRE

veröffentlicht 2019-05-24geändert 2026-06-17

verwandt (11,872)

Verwandte Einträge.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2026-11645US	—OT kritisch	2.44% (84th)	KEV	2026-06-09
Out of bounds read and write in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium…
CVE-2026-3055US	critical9.8OT kritisch	91.5% (100th)	KEV	2026-03-23
Insufficient input validation in NetScaler ADC and NetScaler Gateway when configured as a SAML IDP leading to memory overread
CVE-2025-5777US	high7.5OT kritisch	100.0% (100th)	KEV	2025-06-17
Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server
CVE-2025-5419US	—OT kritisch	7.82% (95th)	KEV	2025-06-03
Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium secur…
CVE-2025-24991US	—OT kritisch	2.02% (81st)	KEV	2025-03-11
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.

+11867 weitere

Referenzen (7)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan