CVE-2018-5839

Improperly configured memory protection allows read/write access to modem image from HLOS kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in versions MDM9150, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8996AU, QCS605, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM630, SDM660, SDX20, SXR1130.

• CWE-269

• http://www.securityfocus.com/bid/106845Third Party Advisory, VDB Entry
• https://www.qualcomm.com/company/product-security/bulletinsVendor Advisory
• http://www.securityfocus.com/bid/106845Third Party Advisory, VDB Entry
• https://www.qualcomm.com/company/product-security/bulletinsVendor Advisory

Published

Feb 25, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-5832Due to a race condition in a camera driver ioctl handler in …
• CVE-2018-5834In __wlan_hdd_cfg80211_vendor_scan(), a buffer overwrite can…
• CVE-2018-5835If the seq_len is greater then CSR_MAX_RSC_LEN, a buffer ove…
• CVE-2018-5836In wma_nan_rsp_event_handler() in Android releases from CAF …
• CVE-2018-5837In Snapdragon (Automobile, Mobile, Wear) in version IPQ8074,…
• CVE-2018-5838Improper Validation of Array Index In the adreno OpenGL driv…
• CVE-2018-5840Buffer Copy without Checking Size of Input can occur during …
• CVE-2018-5841dcc_curr_list is initialized with a default invalid value th…
• CVE-2018-5842An arbitrary address write can occur if a compromised WLAN f…
• CVE-2018-5843In the function wma_pdev_div_info_evt_handler() in all Andro…
• CVE-2018-5844In the video driver function set_output_buffers(), binfo can…
• CVE-2018-5845A race condition in drm_atomic_nonblocking_commit() in the d…