CVE-2018-5852
High
Published: 26 November 2024
Published
26 November 2024
Modified
09 January 2025
KEV Added
—
Patch
—
CVSS Score v3.1
8.4
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.0006
17.5th percentile
Risk Priority
17
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2018-5852 is a high-severity Buffer Over-read (CWE-126) vulnerability in Qualcomm Mdm9206 Firmware. Its CVSS base score is 8.4 (High).
Operationally, ranked at the 17.5th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2018-17619
Vulnerability details
An unsigned integer underflow vulnerability in IPA driver result into a buffer over-read while reading NAT entry using debugfs command 'cat /sys/kernel/debug/ipa/ip4_nat'
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
qualcomm
mdm9206 firmware
all versions
qualcomm
mdm9607 firmware
all versions
qualcomm
mdm9640 firmware
all versions
qualcomm
mdm9650 firmware
all versions
qualcomm
msm8909w firmware
all versions
qualcomm
sd 210 firmware
all versions
qualcomm
sd 212 firmware
all versions
qualcomm
sd 205 firmware
all versions
qualcomm
sd 425 firmware
all versions
qualcomm
sd 430 firmware
all versions
+13 more product configuration(s) — see NVD for full list
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.