CVE-2018-5843

Name: CVE-2018-5843
Creator: NVD / NIST
Published: 2018-06-12T20:29:00.827+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 0.17%

Last modified Jun 17, 2026

CVE-2018-5843 is a vulnerability of currently unknown severity. In the function wma_pdev_div_info_evt_handler() in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel, there is no upper bound check on the value event->num_chains_valid received from firmware which can lead to a buffer overwrite of the fixed size chain_rssi_result structure.. EPSS estimates a 0.17% chance of exploitation in the next 30 days.

Description

In the function wma_pdev_div_info_evt_handler() in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel, there is no upper bound check on the value event->num_chains_valid received from firmware which can lead to a buffer overwrite of the fixed size chain_rssi_result structure.

Metrics

EPSS Probability

0.17%

6.5th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-119

Affected Software

Vendor	Product	Versions
Google	Android	All versions

References

https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2Patch, Third Party Advisory
https://source.android.com/security/bulletin/pixel/2018-05-01Third Party Advisory
https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2Patch, Third Party Advisory

Timeline

Published: Jun 12, 2018
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2018-5843?

How severe is CVE-2018-5843?

Severity scoring for CVE-2018-5843 is pending analysis. The EPSS model estimates a 0.17% probability of exploitation in the next 30 days.

How do I fix CVE-2018-5843?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2018-5843?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST