Qualcomm SD 52 Firmware vulnerabilities

2 CVEs affecting Qualcomm SD 52 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-11945, published 2019-02-25.

More from Qualcomm.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-11945, published 2019-02-25. Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days. Improper input validation in wireless service messaging module for data received from broadcast messages can lead to heap overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer…
• CVE-2018-11938, published 2019-02-25. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Improper input validation for argument received from HLOS can lead to buffer overflows and unexpected behavior in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…