VULNERABILITY INTELLIGENCE

CVE-2018-5914

CVSS score7.8 HIGH
EPSS probability0.21%
CISA KEVNot currently listed
Published2018-10-26
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

Improper input validation in TZ led to array out of bound in TZ function while accessing the peripheral details using the incoming data in Snapdragon Mobile, Snapdragon Wear version MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 835, SDA660.

Weakness classification

  • CWE-129: Improper Validation of Array Index

Primary references