CVE-2018-11305: Qualcomm MDM9206 Firmware

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

When a series of FDAL messages are sent to the modem, a Use After Free condition can occur in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SDA660, SDX20.

Affected products

  • Qualcomm MDM9206 Firmware: affected versions not specified
  • Qualcomm MDM9607 Firmware: affected versions not specified
  • Qualcomm MDM9640 Firmware: affected versions not specified
  • Qualcomm MDM9650 Firmware: affected versions not specified
  • Qualcomm MSM8909W Firmware: affected versions not specified
  • Qualcomm MSM8996AU Firmware: affected versions not specified
  • Qualcomm Sd 205 Firmware: affected versions not specified
  • Qualcomm Sd 210 Firmware: affected versions not specified
  • Qualcomm Sd 212 Firmware: affected versions not specified
  • Qualcomm Sd 415 Firmware: affected versions not specified
  • Qualcomm Sd 425 Firmware: affected versions not specified
  • Qualcomm Sd 430 Firmware: affected versions not specified
  • Qualcomm Sd 450 Firmware: affected versions not specified
  • Qualcomm Sd 615 Firmware: affected versions not specified
  • Qualcomm Sd 616 Firmware: affected versions not specified
  • Qualcomm Sd 617 Firmware: affected versions not specified
  • Qualcomm Sd 625 Firmware: affected versions not specified
  • Qualcomm Sd 650 Firmware: affected versions not specified
  • Qualcomm Sd 652 Firmware: affected versions not specified
  • Qualcomm Sd 820 Firmware: affected versions not specified
  • Qualcomm Sd 820a Firmware: affected versions not specified
  • Qualcomm Sd 835 Firmware: affected versions not specified
  • Qualcomm Sd 845 Firmware: affected versions not specified
  • Qualcomm SDA660 Firmware: affected versions not specified
  • Qualcomm SDX20 Firmware: affected versions not specified

Published 2018-10-26. Last modified 2026-06-17.