---
cve: "CVE-2018-11895"
severity: "LOW"
cvss: 3.1
epss: "20%"
vendor: "Qualcomm, Inc."
kev: false
exploited: false
published: "2018-09-19 14:00:00"
tags: [cve, security, low]
source: tsecurity.de CVE-Dossier
exported: "2026-09-10T09:04:58+02:00"
---

# CVE-2018-11895

> 3.1 LOW

## Beschreibung

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, improper length check Validation in WLAN function can lead to driver writes the default rsn capabilities to the memory not allocated to the frame.

## Referenzen

- <https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin>
- <https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=3dfe93028c0c6564db7aa4607a85413195925aa4>
- <http://www.securityfocus.com/bid/107770>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2018-11895) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_