CVE-2018-5852
HIGHDescription
An unsigned integer underflow vulnerability in IPA driver result into a buffer over-read while reading NAT entry using debugfs command 'cat /sys/kernel/debug/ipa/ip4_nat'
Is your site exposed to CVE-2018-5852?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| qualcomm | mdm9206_firmware |
| qualcomm | mdm9206 |
| qualcomm | mdm9607_firmware |
| qualcomm | mdm9607 |
| qualcomm | mdm9640_firmware |
| qualcomm | mdm9640 |
| qualcomm | mdm9650_firmware |
| qualcomm | mdm9650 |
| qualcomm | msm8909w_firmware |
| qualcomm | msm8909w |
| qualcomm | sd_210_firmware |
| qualcomm | sd_210 |
| qualcomm | sd_212_firmware |
| qualcomm | sd_212 |
| qualcomm | sd_205_firmware |
| qualcomm | sd_205 |
| qualcomm | sd_425_firmware |
| qualcomm | sd_425 |
| qualcomm | sd_430_firmware |
| qualcomm | sd_430 |
| qualcomm | sd_450_firmware |
| qualcomm | sd_450 |
| qualcomm | sd_615_firmware |
| qualcomm | sd_615 |
| qualcomm | sd_616_firmware |
| qualcomm | sd_616 |
| qualcomm | sd_415_firmware |
| qualcomm | sd_415 |
| qualcomm | sd_617_firmware |
| qualcomm | sd_617 |
| qualcomm | sd_625_firmware |
| qualcomm | sd_625 |
| qualcomm | sd_650_firmware |
| qualcomm | sd_650 |
| qualcomm | sd_652_firmware |
| qualcomm | sd_652 |
| qualcomm | sd_810_firmware |
| qualcomm | sd_810 |
| qualcomm | sd_820_firmware |
| qualcomm | sd_820 |
| qualcomm | sd_820a_firmware |
| qualcomm | sd_820a |
| qualcomm | sd_835_firmware |
| qualcomm | sd_835 |
| qualcomm | sd_845_firmware |
| qualcomm | sd_845 |
References
Frequently Asked Questions
What is CVE-2018-5852? +
How severe is CVE-2018-5852? +
What products are affected by CVE-2018-5852? +
How do I check if I'm vulnerable to CVE-2018-5852? +
Related Vulnerabilities
A buffer overread can occur in the CPC application when operating in full duplex SPI upon receiving an invalid packet …
rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.24 to before 0.10.78, the FFI trampolines behind SslContextBuilder::set_psk_client_callback, set_psk_server_callback, …
In multiple functions that process 802.11 frames, out-of-bounds reads can occur due to insufficient validation.
FreeRTOS-Plus-TCP is a lightweight TCP/IP stack for FreeRTOS. FreeRTOS-Plus-TCP versions 4.0.0 through 4.1.0 contain a buffer over-read issue in the …
BACnet Stack before 1.3.2 has a decode function APDU buffer over-read in bacapp_decode_application_data in bacapp.c.
In Eclipse Foundation NextX Duo before 6.4.4, a module of ThreadX, the _nx_secure_tls_process_clienthello() function was missing length verification of certain …