CVE-2018-11945

Improper input validation in wireless service messaging module for data received from broadcast messages can lead to heap overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in versions MDM9150, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU, QCS605, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, SDX20, Snapdragon_High_Med_2016, SXR1130.

• CWE-787

• http://www.securityfocus.com/bid/106845Third Party Advisory, VDB Entry
• https://www.qualcomm.com/company/product-security/bulletinsVendor Advisory
• http://www.securityfocus.com/bid/106845Third Party Advisory, VDB Entry
• https://www.qualcomm.com/company/product-security/bulletinsVendor Advisory

Published

Feb 25, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-1194Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2018-11940Lack of check in length before using memcpy in WLAN function…
• CVE-2018-11941Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-11942Failure to initialize the reserved memory which is sent to t…
• CVE-2018-11943In all android releases(Android for MSM, Firefox OS for MSM,…
• CVE-2018-11944Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-11946In all android releases(Android for MSM, Firefox OS for MSM,…
• CVE-2018-11947The txrx stats req might be double freed in the pdev detach …
• CVE-2018-11948Exceeding the limit of usage entries are not tracked and the…
• CVE-2018-11949Failure to initialize the extra buffer can lead to an out of…
• CVE-2018-1195In Cloud Controller versions prior to 1.46.0, cf-deployment …8.8
• CVE-2018-11950Unapproved TrustZone applications can be loaded and executed…