CVE-2018-11816
Use After Free in Video
7.8 High
Crafted Binder Request Causes Heap UAF in MediaServer
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
0.11%Up 0.1 points since Nov 27, 2024
What each source reports
CVE List Score used
Use After Free in Video
Crafted Binder Request Causes Heap UAF in MediaServer
- Record
CVE-2018-11816- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-416
- Updated
- 2026-11-02
EUVDEUVD-2018-3808
Crafted Binder Request Causes Heap UAF in MediaServer
- Record
EUVD-2018-3808- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7gfr-xrcc-jm66
Crafted Binder Request Causes Heap UAF in MediaServer
Crafted Binder Request Causes Heap UAF in MediaServer
- Record
GHSA-7gfr-xrcc-jm66- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-416
- Updated
- 2026-11-02
NVD
Crafted Binder Request Causes Heap UAF in MediaServer
- Record
CVE-2018-11816- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-416
- Updated
- 2026-11-02
Affected products
- qualcomm 9206 lte modem firmware
- qualcomm apq8016 firmware
- qualcomm apq8017 firmware
- qualcomm apq8039 firmware
- qualcomm apq8052 firmware
- qualcomm apq8056 firmware
- qualcomm apq8076 firmware
- qualcomm aqt1000 firmware
- qualcomm ar6003 firmware
- qualcomm sd660 firmware
- qualcomm sd670 firmware
- qualcomm sd820 firmware
Show 3 moreShow less
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2018-11816 is a high vulnerability (CVSS 7.8) in Qualcomm 9206 Lte Modem Firmware, published November 26, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.11%, the 1st percentile. No source names a fixed version.