Skip to content
OpenAdvisories
Unscored CVE-2018-11264 EUVD-2018-3304GHSA-qp77-44wf-mg85

Possible buffer overflow in Ontario fingerprint code due to lack of input validation for the parameters coming into TZ from HLOS in Snapdra…

Published Nov 28, 2018 · Updated Aug 5, 2024 · Assigned by qualcomm

Vendor: Qualcomm Product: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear

Description

Possible buffer overflow in Ontario fingerprint code due to lack of input validation for the parameters coming into TZ from HLOS in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SDA660.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SDA660 —

References