CVE-2018-5903: Out-of-bounds Read
Out of bounds read occurs due to improper validation of array while processing VDEV stop response from WLAN firmware in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCS405, QCS605, SD 210/SD 212/SD 205, SD 615/16/SD 415, SD 625, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820A, SD 835, SD 855, SDA660, SDM630, SDM660, SDX20, SDX24
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-5903?
CVE-2018-5903 is a vulnerability that allows for out of bounds read due to improper validation of an array while processing VDEV stop response from WLAN firmware.
Which software are affected by CVE-2018-5903?
CVE-2018-5903 affects Qualcomm Mdm9206 Firmware, Qualcomm Mdm9640 Firmware, Qualcomm Mdm9650 Firmware, Qualcomm Msm8996au Firmware, Qualcomm Qcs405 Firmware, Qualcomm Qcs605 Firmware, Qualcomm Sd 210 Firmware, Qualcomm Sd 212 Firmware, Qualcomm Sd 205 Firmware, Qualcomm Sd 616 Firmware, Qualcomm Sd 415 Firmware, Qualcomm Sd 625 Firmware, Qualcomm Sd 636 Firmware, Qualcomm Sd 650 Firmware, Qualcomm Sd 652 Firmware, Qualcomm Sd 675 Firmware, Qualcomm Sd 712 Firmware, Qualcomm Sd 710 Firmware, Qualcomm Sd 670 Firmware, Qualcomm Sd 730 Firmware, Qualcomm Sd 820a Firmware, Qualcomm Sd 835 Firmware, Qualcomm Sd 855 Firmware, Qualcomm Sda660 Firmware, Qualcomm Sdm630 Firmware, Qualcomm Sdm660 Firmware, and Qualcomm Sdx24 Firmware.
What is the severity of CVE-2018-5903?
The severity of CVE-2018-5903 is high with a severity score of 7.8.
How do I fix CVE-2018-5903?
To fix CVE-2018-5903, it is recommended to apply the necessary security patches provided by Qualcomm.
Where can I find more information about CVE-2018-5903?
You can find more information about CVE-2018-5903 on the Code Aurora security bulletin for May 2019.