CVE-2018-5917
Possible buffer overflow in OEM crypto function due to improper input validation in Snapdragon Automobile, Snapdragon Mobile in versions MSM8996AU, SD 425, SD 430, SD 450, SD 625, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDA845, SDX24, SXR1130.
- Score
- CVSS 3.0 7.8 High
- Status
- Modified - product-security@qualcomm.com
- Published
- 2018-11-28
- Last modified
- 2024-08-05
- Weaknesses
- CWE-119
Affected products
- Msm8996au Firmware (Qualcomm)
- Sd 425 Firmware (Qualcomm)
- Sd 430 Firmware (Qualcomm)
- Sd 450 Firmware (Qualcomm)
- Sd 625 Firmware (Qualcomm)
- Sd 820 Firmware (Qualcomm)
- Sd 820a Firmware (Qualcomm)
- Sd 835 Firmware (Qualcomm)
- Sd 845 Firmware (Qualcomm)
- Sd 850 Firmware (Qualcomm)
- Sda660 Firmware (Qualcomm)
- Sda845 Firmware (Qualcomm)
- Sdx24 Firmware (Qualcomm)
- Sxr1130 Firmware (Qualcomm)
- Snapdragon Automobile (Qualcomm Inc.)
- Snapdragon Mobile (Qualcomm Inc.)
References
- http://www.securityfocus.com/bid/105838
- https://www.qualcomm.com/company/product-security/bulletins
