CVE-2018-5840
Buffer Copy without Checking Size of Input can occur during the DRM SDE driver initialization sequence in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.
- Score
- CVSS 3.0 7.8 High
- Status
- Modified - product-security@qualcomm.com
- Published
- 2018-06-06
- Last modified
- 2024-09-16
- Weaknesses
- CWE-120
Affected products
- Android (Google)
- Android For Msm (Qualcomm Inc.)
- Firefox Os For Msm (Qualcomm Inc.)
- Qrd Android (Qualcomm Inc.)
References
- https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2
- https://source.android.com/security/bulletin/2018-05-01
