First published: Mon Jul 02 2018(Updated: )
While parsing an mp4 file, an integer overflow leading to a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear.
Credit: product-security@qualcomm.com
Affected Software | Affected Version | How to fix |
---|---|---|
Qualcomm MDM9206 firmware | ||
Qualcomm MDM9206 | ||
Qualcomm MDM9607 firmware | ||
Qualcomm MDM9607 | ||
Qualcomm MDM9650 firmware | ||
Qualcomm MDM9650 | ||
Qualcomm MSM8909W | ||
Qualcomm MSM8909W | ||
Qualcomm MSM8996AU Firmware | ||
Qualcomm MSM8996AU Firmware | ||
qualcomm SD 210 firmware | ||
qualcomm SD 210 | ||
qualcomm SD 212 firmware | ||
qualcomm SD 212 | ||
qualcomm SD 205 firmware | ||
qualcomm SD 205 | ||
qualcomm SD 425 firmware | ||
qualcomm SD 425 | ||
Qualcomm SD 430 firmware | ||
Qualcomm SD 430 | ||
Qualcomm SD 450 firmware | ||
Qualcomm SD 450 | ||
qualcomm SD 600 firmware | ||
qualcomm SD 600 | ||
qualcomm sd 615 firmware | ||
qualcomm sd 615 | ||
qualcomm sd 616 firmware | ||
qualcomm sd 616 | ||
qualcomm sd 415 firmware | ||
qualcomm sd 415 | ||
qualcomm sd 617 firmware | ||
Qualcomm QCA617 | ||
qualcomm SD 625 firmware | ||
qualcomm SD 625 | ||
qualcomm sd 650 firmware | ||
qualcomm sd 650 | ||
qualcomm sd 652 firmware | ||
qualcomm sd 652 | ||
qualcomm SD 820 firmware | ||
qualcomm SD 820 | ||
qualcomm SD 820A firmware | ||
qualcomm SD 820A | ||
qualcomm SD 835 firmware | ||
qualcomm SD 835 | ||
qualcomm SD 845 firmware | ||
qualcomm SD 845 | ||
Qualcomm SDX20 Firmware | ||
Qualcomm SDX20 Firmware | ||
Android |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2018-5875 has a high severity rating due to the potential for remote code execution through a buffer overflow.
To fix CVE-2018-5875, ensure that your device firmware and Android version are updated to the latest security patches provided by your vendor.
CVE-2018-5875 affects various Qualcomm Snapdragon products, including Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear devices.
CVE-2018-5875 can allow attackers to exploit vulnerabilities in media file parsing, potentially leading to unauthorized access or device takeover.
There are no specific workarounds for CVE-2018-5875; the best protection is to apply available firmware updates immediately.