CVSS 3.0
7.8 highCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2018-5868
High (7.8) in qualcomm. EPSS 0.3% chance of exploitation in the next 30 days.
Lack of checking input size can lead to buffer overflow In WideVine in snapdragon automobile and snapdragon mobile in versions MSM8996AU, SD 425, SD 430, SD 450, SD 625, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDX24, SXR1130
Severity
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 17% of CVEs (scores of 2026-10-31)
- CWE
- CWE-119
- Published
- Modified
- Record from
- the NVD, synced
Affected
- qualcomm:msm8996au_firmware
- qualcomm:sd_425_firmware
- qualcomm:sd_430_firmware
- qualcomm:sd_450_firmware
- qualcomm:sd_625_firmware
- qualcomm:sd_670_firmware
- qualcomm:sd_710_firmware
- qualcomm:sd_712_firmware
- qualcomm:sd_820_firmware
- qualcomm:sd_820a_firmware
- qualcomm:sd_835_firmware
- qualcomm:sd_845_firmware
- qualcomm:sd_850_firmware
- qualcomm:sda660_firmware
- qualcomm:sdx24_firmware
- qualcomm:sxr1130_firmware