CVE-2018-5914

2018-10-2613:00:00

qualcomm

www.cve.org

0.0004 Low

EPSS

Percentile

12.7%

JSON

Improper input validation in TZ led to array out of bound in TZ function while accessing the peripheral details using the incoming data in Snapdragon Mobile, Snapdragon Wear version MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 835, SDA660.

CNA Affected

[
  {
    "product": "Snapdragon Mobile, Snapdragon Wear",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 835, SDA660"
      }
    ]
  }
]

References

www.qualcomm.com/company/product-security/bulletins

0.0004 Low

EPSS

Percentile

12.7%

JSON

Related for CVELIST:CVE-2018-5914