CVEvulnerability

CVE-2018-5852

7.8 HIGH Published 2024-11-26 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-11-26
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.4 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-126, CWE-191

Description

An unsigned integer underflow vulnerability in IPA driver result into a buffer over-read while reading NAT entry using debugfs command 'cat /sys/kernel/debug/ipa/ip4_nat'

Affected configurations

• qualcomm mdm9206 firmware • qualcomm mdm9607 firmware • qualcomm mdm9640 firmware • qualcomm mdm9650 firmware • qualcomm msm8909w firmware • qualcomm sd 210 firmware • qualcomm sd 212 firmware • qualcomm sd 205 firmware • qualcomm sd 425 firmware • qualcomm sd 430 firmware • qualcomm sd 450 firmware • qualcomm sd 615 firmware • qualcomm sd 616 firmware • qualcomm sd 415 firmware • qualcomm sd 617 firmware • qualcomm sd 625 firmware • qualcomm sd 650 firmware • qualcomm sd 652 firmware • qualcomm sd 810 firmware • qualcomm sd 820 firmware • qualcomm sd 820a firmware • qualcomm sd 835 firmware • qualcomm sd 845 firmware

Related

Weakness · CWE (2)

  • CWE-126 Buffer Over-read weakness
  • CWE-191 Integer Underflow (Wrap or Wraparound) weakness

References