Vulnerabilities > CVE-2018-5879 - Out-of-bounds Write vulnerability in Qualcomm products

CVSS 8.3 - HIGH

Attack vector

ADJACENT_NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

COMPLETE

Integrity impact

COMPLETE

Availability impact

COMPLETE

low complexity

qualcomm

CWE-787

NVD

Published: 2019-01-18

Updated: 2020-08-24

Summary

Improper length check while processing an MQTT message can lead to heap overflow in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 835, SDA660, SDM630, SDM660

Vulnerable Configurations

Part	Description	Count
OS	Qualcomm Qualcomm Mdm9206 Firmware - Qualcomm Mdm9607 Firmware - Qualcomm SD 210 Firmware - Qualcomm SD 212 Firmware - Qualcomm SD 205 Firmware - Qualcomm SD 425 Firmware - Qualcomm SD 427 Firmware - Qualcomm SD 430 Firmware - Qualcomm SD 435 Firmware - Qualcomm SD 450 Firmware - Qualcomm SD 625 Firmware - Qualcomm SD 636 Firmware - Qualcomm SD 835 Firmware - Qualcomm Sda660 Firmware - Qualcomm Sdm630 Firmware - Qualcomm Sdm660 Firmware -	16
Hardware	Qualcomm Qualcomm Mdm9206 - Qualcomm Mdm9607 - Qualcomm SD 210 - Qualcomm SD 212 - Qualcomm SD 205 - Qualcomm SD 425 - Qualcomm SD 427 - Qualcomm SD 430 - Qualcomm SD 435 - Qualcomm SD 450 - Qualcomm SD 625 - Qualcomm SD 636 - Qualcomm SD 835 - Qualcomm Sda660 - Qualcomm Sdm630 - Qualcomm Sdm660 -	16

Common Weakness Enumeration (CWE)

CWE-787 - Out-of-bounds Write

References

https://www.qualcomm.com/company/product-security/bulletins