CVE-2018-5885

CRITICAL

Snapdragon Mobile/Snapdragon Wear - Buffer Overflow

Title source: llm

Description

While loading dynamic fonts, a buffer overflow may occur if the number of segments in the font file is out of range in Snapdragon Mobile and Snapdragon Wear.

References (1)

Core 1

Core References

Vendor Advisory x_refsource_confirm

https://www.qualcomm.com/company/product-security/bulletins

Scores

CVSS v3 9.8

EPSS 0.0030

EPSS Percentile 53.2%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-119

Status published

Products (12)

qualcomm/msm8909w_firmware

qualcomm/msm8996au_firmware

qualcomm/sd_205_firmware

qualcomm/sd_210_firmware

qualcomm/sd_212_firmware

qualcomm/sd_415_firmware

qualcomm/sd_450_firmware

qualcomm/sd_615_firmware

qualcomm/sd_616_firmware

qualcomm/sd_625_firmware

... and 2 more

Published Jul 06, 2018

Tracked Since Feb 18, 2026