CVE-2018-5903

Description

Out of bounds read occurs due to improper validation of array while processing VDEV stop response from WLAN firmware in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCS405, QCS605, SD 210/SD 212/SD 205, SD 615/16/SD 415, SD 625, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820A, SD 835, SD 855, SDA660, SDM630, SDM660, SDX20, SDX24

CVSS 3.0

7.8 HIGHCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.22% probability · 12th percentile

Public exploits

None in Exploit-DB

CISA KEV

Not listed

Weakness

CWE-129

Affected

qualcomm/mdm9206 firmware · qualcomm/mdm9607 firmware · qualcomm/mdm9640 firmware · qualcomm/mdm9650 firmware · qualcomm/msm8996au firmware · qualcomm/qcs405 firmware · qualcomm/qcs605 firmware · qualcomm/sd 210 firmware · qualcomm/sd 212 firmware · qualcomm/sd 205 firmware · qualcomm/sd 615 firmware · qualcomm/sd 616 firmware · qualcomm/sd 415 firmware · qualcomm/sd 625 firmware · qualcomm/sd 636 firmware · qualcomm/sd 650 firmware · qualcomm/sd 652 firmware · qualcomm/sd 675 firmware · qualcomm/sd 712 firmware · qualcomm/sd 710 firmware · +10 more

Source

product-security@qualcomm.com

Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.