CVE-2018-5885: Buffer Overflow
Published Jun 4, 2018
·Updated
While loading dynamic fonts, a buffer overflow may occur if the number of segments in the font file is out of range in Snapdragon Mobile and Snapdragon Wear.
Affected Software
49 affected components
Google Android
Qualcomm Msm8909w Firmware
Qualcomm MSM8909W
Qualcomm Msm8996au Firmware
Qualcomm MSM8996AU
Qualcomm Sd 210 Firmware
Qualcomm SD 210
Qualcomm Sd 212 Firmware
Qualcomm SD 212
Qualcomm Sd 205 Firmware
Qualcomm SD 205
Qualcomm Sd 450 Firmware
Qualcomm SD 450
Qualcomm Sd 615 Firmware
Qualcomm SD 615
Qualcomm Sd 616 Firmware
Qualcomm Sd 616
Qualcomm Sd 415 Firmware
Qualcomm SD 415
Qualcomm Sd 625 Firmware
Qualcomm SD 625
Qualcomm Sd 820 Firmware
Qualcomm SD 820
Qualcomm Sd 845 Firmware
Qualcomm SD 845
All of the following
Qualcomm Msm8909w Firmware
Qualcomm MSM8909W
All of the following
Qualcomm Msm8996au Firmware
Qualcomm MSM8996AU
All of the following
Qualcomm Sd 210 Firmware
Qualcomm SD 210
All of the following
Qualcomm Sd 212 Firmware
Qualcomm SD 212
All of the following
Qualcomm Sd 205 Firmware
Qualcomm SD 205
All of the following
Qualcomm Sd 450 Firmware
Qualcomm SD 450
All of the following
Qualcomm Sd 615 Firmware
Qualcomm SD 615
All of the following
Qualcomm Sd 616 Firmware
Qualcomm Sd 616
All of the following
Qualcomm Sd 415 Firmware
Qualcomm SD 415
All of the following
Qualcomm Sd 625 Firmware
Qualcomm SD 625
All of the following
Qualcomm Sd 820 Firmware
Qualcomm SD 820
All of the following
Qualcomm Sd 845 Firmware
Qualcomm SD 845
Event History
Jun 4, 2018
CVE Published
via Android·12:00 AM
Jul 6, 2018
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
DescriptionWeakness
Data Sourced
via NVD·05:29 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2018-5885?
CVE-2018-5885 is classified as a high severity vulnerability due to the potential for a buffer overflow during font loading.
2
How do I fix CVE-2018-5885?
To fix CVE-2018-5885, users should update their affected Qualcomm devices to the latest firmware provided by Qualcomm.
3
Which devices are affected by CVE-2018-5885?
CVE-2018-5885 affects various Qualcomm Snapdragon mobile and wearable devices that handle dynamic font loading.
4
Can CVE-2018-5885 lead to remote code execution?
Yes, CVE-2018-5885 has the potential to lead to remote code execution due to its nature of buffer overflow.
5
Is there a workaround for CVE-2018-5885?
There are currently no known workarounds for CVE-2018-5885; updating affected devices is the recommended action.