CVE-2018-5883

HIGH

Qualcomm Multiple Chipsets Firmware - Buffer Overflow in WLAN Driver Event Handler

Title source: llm

Description

Buffer overflow in WLAN driver event handlers due to improper validation of array index in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCS405, QCS605, SD 636, SD 675, SD 730, SD 820A, SD 835, SD 855, SDA660, SDM630, SDM660, SDX20, SDX24

References (1)

Core 1

Core References

Third Party Advisory x_refsource_confirm

https://www.codeaurora.org/security-bulletin/2019/05/06/may-2019-code-aurora-security-bulletin

Scores

CVSS v3 7.8

EPSS 0.0004

EPSS Percentile 11.4%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-129

Status published

Products (18)

qualcomm/mdm9206_firmware

qualcomm/mdm9607_firmware

qualcomm/mdm9640_firmware

qualcomm/mdm9650_firmware

qualcomm/msm8996au_firmware

qualcomm/qcs405_firmware

qualcomm/qcs605_firmware

qualcomm/sd_636_firmware

qualcomm/sd_675_firmware

qualcomm/sd_730_firmware

... and 8 more

Published Jun 14, 2019

Tracked Since Feb 18, 2026