CVE-2018-11291: Qualcomm IPQ8074 Firmware

High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days.

In Snapdragon (Automobile, Mobile, Wear) in version IPQ8074, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA4531, QCA6174A, QCA6564, QCA6574, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9378, QCA9379, SD 425, SD 427, SD 430, SD 435, SD 450, SD 600, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDM630, SDM632, SDM636, SDM660, SDX20, Snapdragon_High_Med_2016, cryptographic issues due to the random number generator was not a strong one in NAN.

Affected products

  • Qualcomm IPQ8074 Firmware: affected versions not specified
  • Qualcomm MDM9206 Firmware: affected versions not specified
  • Qualcomm MDM9607 Firmware: affected versions not specified
  • Qualcomm MDM9640 Firmware: affected versions not specified
  • Qualcomm MDM9650 Firmware: affected versions not specified
  • Qualcomm MSM8996AU Firmware: affected versions not specified
  • Qualcomm QCA4531 Firmware: affected versions not specified
  • Qualcomm QCA6174A Firmware: affected versions not specified
  • Qualcomm QCA6564 Firmware: affected versions not specified
  • Qualcomm QCA6574 Firmware: affected versions not specified
  • Qualcomm QCA6574AU Firmware: affected versions not specified
  • Qualcomm QCA6584 Firmware: affected versions not specified
  • Qualcomm QCA6584AU Firmware: affected versions not specified
  • Qualcomm QCA9377 Firmware: affected versions not specified
  • Qualcomm QCA9378 Firmware: affected versions not specified
  • Qualcomm QCA9379 Firmware: affected versions not specified
  • Qualcomm SD425 Firmware: affected versions not specified
  • Qualcomm SD427 Firmware: affected versions not specified
  • Qualcomm SD430 Firmware: affected versions not specified
  • Qualcomm SD435 Firmware: affected versions not specified
  • Qualcomm SD450 Firmware: affected versions not specified
  • Qualcomm SD600 Firmware: affected versions not specified
  • Qualcomm SD625 Firmware: affected versions not specified
  • Qualcomm SD650 Firmware: affected versions not specified
  • Qualcomm SD652 Firmware: affected versions not specified
  • and 11 more

Published 2018-09-20. Last modified 2026-06-17.