CVE-2018-5893
N/A
Published: July 6, 2018 at 05:00 PM UTC
Updated: June 17, 2026 at 02:00 AM UTC
1 product affected across 1 vendorAndroid
Using Android for MSM, Firefox OS for MSM, QRD Android by Qualcomm, Inc.?
Get instant alerts when new vulnerabilities affect Android for MSM, Firefox OS for MSM, QRD Android - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.2%
Description
While processing a message from firmware in htt_t2h_msg_handler_fast() in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, a buffer overwrite can occur.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
- https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-components
- https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=4cc54a30958d2a8d989364aa45a27fde3dd17352
- https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin
References (3)
x_refsource_CONFIRMPatchVendor Advisory
Source: [email protected]
https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-componentsx_refsource_CONFIRMPatchThird Party Advisory
Source: [email protected]
https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletinQuick Info
StatusMODIFIED
CWE
CWE-119
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card