CVE-2018-5840

Buffer Copy without Checking Size of Input can occur during the DRM SDE driver initialization sequence in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.

• CWE-120

• https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2Patch, Third Party Advisory
• https://source.android.com/security/bulletin/2018-05-01Patch, Vendor Advisory
• https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2Patch, Third Party Advisory

Published

Jun 6, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-5834In __wlan_hdd_cfg80211_vendor_scan(), a buffer overwrite can…
• CVE-2018-5835If the seq_len is greater then CSR_MAX_RSC_LEN, a buffer ove…
• CVE-2018-5836In wma_nan_rsp_event_handler() in Android releases from CAF …
• CVE-2018-5837In Snapdragon (Automobile, Mobile, Wear) in version IPQ8074,…
• CVE-2018-5838Improper Validation of Array Index In the adreno OpenGL driv…
• CVE-2018-5839Improperly configured memory protection allows read/write ac…
• CVE-2018-5841dcc_curr_list is initialized with a default invalid value th…
• CVE-2018-5842An arbitrary address write can occur if a compromised WLAN f…
• CVE-2018-5843In the function wma_pdev_div_info_evt_handler() in all Andro…
• CVE-2018-5844In the video driver function set_output_buffers(), binfo can…
• CVE-2018-5845A race condition in drm_atomic_nonblocking_commit() in the d…
• CVE-2018-5846A Use After Free condition can occur in the IPA driver whene…