CVE-2018-5893

While processing a message from firmware in htt_t2h_msg_handler_fast() in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, a buffer overwrite can occur.

• CWE-119

• https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-componentsPatch, Vendor Advisory
• https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=4cc54a30958d2a8d989364aa45a27fde3dd17352Patch
• https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletinPatch, Third Party Advisory
• https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-componentsPatch, Vendor Advisory
• https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=4cc54a30958d2a8d989364aa45a27fde3dd17352Patch
• https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletinPatch, Third Party Advisory

Published

Jul 6, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-5887While processing the USB StrSerialDescriptor array, an array…
• CVE-2018-5888While processing the system path, an out of bounds access ca…
• CVE-2018-5889While processing a compressed kernel image, a buffer overflo…
• CVE-2018-5890If the fdt_totalsize is reported as 0 for the current device…
• CVE-2018-5891While processing modem SSR after IMS is registered, the IMS …
• CVE-2018-5892The Touch Pal application can collect user behavior data wit…
• CVE-2018-5894Improper Validation of Array Index in Multimedia While parsi…
• CVE-2018-5895Buffer over-read may happen in wma_process_utf_event() due t…
• CVE-2018-5896In Android releases from CAF using the linux kernel (Android…
• CVE-2018-5897While reading the data from buffer in dci_process_ctrl_statu…
• CVE-2018-5898Integer overflow can occur in msm_pcm_adsp_stream_cmd_put() …
• CVE-2018-5899In Android releases from CAF using the linux kernel (Android…