CVE-2018-5917

—

CVSS 3.0

7.8 high

EPSS

<1%p18

Published

Nov 28, 2018 (Nov 28, 2018)

Modified

Jun 17, 2026

Description

Possible buffer overflow in OEM crypto function due to improper input validation in Snapdragon Automobile, Snapdragon Mobile in versions MSM8996AU, SD 425, SD 430, SD 450, SD 625, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDA845, SDX24, SXR1130.

Vendors: qualcomm
Products: msm8996au firmware, sd 425 firmware, sd 430 firmware, sd 450 firmware, sd 625 firmware, sd 820 firmware, sd 820a firmware, sd 835 firmware, sd 845 firmware, sd 850 firmware, sda660 firmware, sda845 firmware
Weakness: CWE-119
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.