CVE-2018-11856

7.8 highEPSS 0.3%

High (7.8) in qualcomm. EPSS 0.3% chance of exploitation in the next 30 days.

Improper input validation leads to buffer overwrite in the WLAN function that handles WMI commands in Snapdragon Mobile in version SD 835, SD 845, SD 850.

Severity

CVSS 3.0

7.8 high

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 17% of CVEs (scores of 2026-10-31)
CWE: CWE-119
Published: 2018-10-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

qualcomm:sd_835_firmware
qualcomm:sd_845_firmware
qualcomm:sd_850_firmware

References

http://www.securityfocus.com/bid/107681
https://www.qualcomm.com/company/product-security/bulletins
http://www.securityfocus.com/bid/107681
https://www.qualcomm.com/company/product-security/bulletins

Check your stack JSON