Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2018-5903

Out of bounds read occurs due to improper validation of array while processing VDEV stop response from WLAN firmware in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCS405, QCS605, SD 210/SD 212/SD 205, SD 615/16/SD 415, SD 625, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820A, SD 835, SD 855, SDA660, SDM630, SDM660, SDX20, SDX24

Published

2019-06-14T17:29:01.173

Last Modified

2024-11-21T04:09:40.197

Status

Modified

Source

[email protected]

Severity

CVSSv3.0: 7.8 (HIGH)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

3.9

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-129
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System qualcomm mdm9206_firmware - Yes
Hardware qualcomm mdm9206 - No
Operating System qualcomm mdm9607_firmware - Yes
Hardware qualcomm mdm9607 - No
Operating System qualcomm mdm9640_firmware - Yes
Hardware qualcomm mdm9640 - No
Operating System qualcomm mdm9650_firmware - Yes
Hardware qualcomm mdm9650 - No
Operating System qualcomm msm8996au_firmware - Yes
Hardware qualcomm msm8996au - No
Operating System qualcomm qcs405_firmware - Yes
Hardware qualcomm qcs405 - No
Operating System qualcomm qcs605_firmware - Yes
Hardware qualcomm qcs605 - No
Operating System qualcomm sd_210_firmware - Yes
Hardware qualcomm sd_210 - No
Operating System qualcomm sd_212_firmware - Yes
Hardware qualcomm sd_212 - No
Operating System qualcomm sd_205_firmware - Yes
Hardware qualcomm sd_205 - No
Operating System qualcomm sd_615_firmware - Yes
Hardware qualcomm sd_615 - No
Operating System qualcomm sd_616_firmware - Yes
Hardware qualcomm sd_616 - No
Operating System qualcomm sd_415_firmware - Yes
Hardware qualcomm sd_415 - No
Operating System qualcomm sd_625_firmware - Yes
Hardware qualcomm sd_625 - No
Operating System qualcomm sd_636_firmware - Yes
Hardware qualcomm sd_636 - No
Operating System qualcomm sd_650_firmware - Yes
Hardware qualcomm sd_650 - No
Operating System qualcomm sd_652_firmware - Yes
Hardware qualcomm sd_652 - No
Operating System qualcomm sd_675_firmware - Yes
Hardware qualcomm sd_675 - No
Operating System qualcomm sd_712_firmware - Yes
Hardware qualcomm sd_712 - No
Operating System qualcomm sd_710_firmware - Yes
Hardware qualcomm sd_710 - No
Operating System qualcomm sd_670_firmware - Yes
Hardware qualcomm sd_670 - No
Operating System qualcomm sd_730_firmware - Yes
Hardware qualcomm sd_730 - No
Operating System qualcomm sd_820a_firmware - Yes
Hardware qualcomm sd_820a - No
Operating System qualcomm sd_835_firmware - Yes
Hardware qualcomm sd_835 - No
Operating System qualcomm sd_855_firmware - Yes
Hardware qualcomm sd_855 - No
Operating System qualcomm sda660_firmware - Yes
Hardware qualcomm sda660 - No
Operating System qualcomm sdm630_firmware - Yes
Hardware qualcomm sdm630 - No
Operating System qualcomm sdm660_firmware - Yes
Hardware qualcomm sdm660 - No
Operating System qualcomm sdx20_firmware - Yes
Hardware qualcomm sdx20 - No
Operating System qualcomm sdx24_firmware - Yes
Hardware qualcomm sdx24 - No
References