CVE-2018-11828

Severity: high (CVSS 7.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-10-26 · updated 2026-06-17
Weakness: CWE-400

Description

When FW tries to get random mac address generated from new SW RNG and ADC values read are constant then DUT get struck in loop while trying to get random ADC samples in Snapdragon Mobile in version SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52

Affected products

Qualcomm Sd 205 Firmware: all versions
Qualcomm Sd 210 Firmware: all versions
Qualcomm Sd 212 Firmware: all versions
Qualcomm Sd 425 Firmware: all versions
Qualcomm Sd 430 Firmware: all versions
Qualcomm Sd 450 Firmware: all versions
Qualcomm Sd 625 Firmware: all versions
Qualcomm Sd 650 Firmware: all versions
Qualcomm Sd 652 Firmware: all versions

References

http://www.securityfocus.com/bid/107681
https://www.qualcomm.com/company/product-security/bulletins
http://www.securityfocus.com/bid/107681
https://www.qualcomm.com/company/product-security/bulletins

Get alerted when CVE-2018-11828 or the next vulnerability affects your stack