CVE-2018-5879

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Improper length check while processing an MQTT message can lead to heap overflow in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 835, SDA660, SDM630, SDM660

Metrics

CVSS 3.0 8.8/10CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published: Jan 18, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-58807.8Improper data length check while processing an event report indication can lead to a buffer overflow in snapdragon mobile and snapdragon wea CVE-2018-58818.8Improper validation of buffer length checks in the lwm2m device management protocol can leads to a buffer overflow in snapdragon mobile and CVE-2018-58829.8While parsing a Flac file with a corrupted comment block, a buffer over-read can occur in Snapdragon Automobile, Snapdragon Mobile and Snapd CVE-2018-58837.8Buffer overflow in WLAN driver event handlers due to improper validation of array index in Snapdragon Auto, Snapdragon Consumer IOT, Snapdra CVE-2018-58848.4Improper Access Control in Multimedia in Snapdragon Mobile and Snapdragon Wear, Non-standard applications without permission may acquire per CVE-2018-58859.8While loading dynamic fonts, a buffer overflow may occur if the number of segments in the font file is out of range in Snapdragon Mobile and CVE-2018-58867.5A pointer in an ADSPRPC command is not properly validated in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox CVE-2018-58877.8While processing the USB StrSerialDescriptor array, an array index out of bounds can occur in Android releases from CAF using the linux kern CVE-2018-58887.8While processing the system path, an out of bounds access can occur in Android releases from CAF using the linux kernel (Android for MSM, Fi CVE-2018-58897.8While processing a compressed kernel image, a buffer overflow can occur in Android releases from CAF using the linux kernel (Android for MSM CVE-2018-58907.8If the fdt_totalsize is reported as 0 for the current device tree, it bypasses an error check for a valid device tree in Android releases fr CVE-2018-58918.4While processing modem SSR after IMS is registered, the IMS data daemon is restarted but the ipc_dataHandle is no longer available. Conseque