CVE-2018-5840

CVE-2018-5840: vulnerability in Qualcomm, Inc. Android for MSM, Firefox OS for…

Published · Updated

Follow this CVE+ Monitor Android for MSM, Firefox OS for MSM, QRD Android

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.4%
Buffer Copy without Checking Size of Input can occur during the DRM SDE driver initialization sequence in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.
Affected products
Qualcomm, Inc. · Android for MSM, Firefox OS for MSM, QRD Android
Related CVEs — Qualcomm, Inc. Android for MSM, Firefox OS for…

In the same product, most dangerous first.

CVE-2018-5855—CVE-2018-5855EPSS 1.1%CVE-2017-11089—CVE-2017-11089EPSS 1.0%CVE-2018-11905—CVE-2018-11905EPSS 0.9%CVE-2018-5829—CVE-2018-5829EPSS 0.9%CVE-2017-15817—CVE-2017-15817EPSS 0.9%CVE-2018-3577—CVE-2018-3577EPSS 0.8%