CVE-2018-5911

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Buffer overflow in WLAN function due to improper check of buffer size before copying in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCS605, SD 625, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820A, SD 855, SDM630, SDM660, SDX20, SDX24

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile	MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCS605, SD 625, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820A, SD 855, SDM630, SDM660, SDX20, SDX24

References

https://www.codeaurora.org/security-bulletin/2019/05/06/may-2019-code-aurora-security-bulletinThird Party Advisory
https://www.codeaurora.org/security-bulletin/2019/05/06/may-2019-code-aurora-security-bulletinThird Party Advisory

Timeline

Published: Jun 14, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-59127.8Potential buffer overflow in Video due to lack of input validation in input and output values in Snapdragon Automobile, Snapdragon Mobile in CVE-2018-59137.8A non-time constant function memcmp is used which creates a side channel that could leak information in Snapdragon Auto, Snapdragon Compute,CVE-2018-59147.8Improper input validation in TZ led to array out of bound in TZ function while accessing the peripheral details using the incoming data in S CVE-2018-59159.8Exception in Modem IP stack while processing IPv6 packet in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9607 CVE-2018-59166.5Buffer overread while decoding PDP modify request or network initiated secondary PDP activation in Snapdragon Automobile, Snapdragon Mobile CVE-2018-59177.8Possible buffer overflow in OEM crypto function due to improper input validation in Snapdragon Automobile, Snapdragon Mobile in versions MSM CVE-2018-59187.8Possible buffer overflow in DRM Trusted application due to lack of check function return values in Snapdragon Automobile, Snapdragon Mobile CVE-2018-59197.8In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, a use after free issue in WLAN ho CVE-2018-59218.8A potential security vulnerability has been identified with certain HP printers and MFPs in 2405129_000052 and other firmware versions. This CVE-2018-59239.8In HP LaserJet Enterprise, HP PageWide Enterprise, HP LaserJet Managed, and HP OfficeJet Enterprise Printers, solution application signature CVE-2018-59249.8A security vulnerability has been identified with certain HP Inkjet printers. A maliciously crafted file sent to an affected device can caus CVE-2018-59257.8A security vulnerability has been identified with certain HP Inkjet printers. A maliciously crafted file sent to an affected device can caus