High severity7.8NVD Advisory· Published Nov 28, 2018· Updated Jun 17, 2026

CVE-2018-5917

Description

Possible buffer overflow in OEM crypto function due to improper input validation in Snapdragon Automobile, Snapdragon Mobile in versions MSM8996AU, SD 425, SD 430, SD 450, SD 625, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDA845, SDX24, SXR1130.

Affected products

Qualcomm/Snapdragon Mobilellm-fuzzy
Range: MSM8996AU, SD 425, SD 430, SD 450, SD 625, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDA845, SDX24, SXR1130
Qualcomm/Snapdragon Automobilellm-fuzzy
Range: MSM8996AU, SD 425, SD 430, SD 450, SD 625, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDA845, SDX24, SXR1130
Qualcomm, Inc./Snapdragon Automobile, Snapdragon Mobilev5
Range: MSM8996AU, SD 425, SD 430, SD 450, SD 625, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDA845, SDX24, SXR1130

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/105838nvdThird Party AdvisoryVDB Entry
www.qualcomm.com/company/product-security/bulletinsnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000