{"id":"CVE-2018-5840","aliases":["EUVD-2018-17607","GHSA-pvgr-wf54-pxhq"],"status":"published","title":"Buffer Copy without Checking Size of Input can occur during the DRM SDE driver initialization...","description":"Buffer Copy without Checking Size of Input can occur during the DRM SDE driver initialization sequence in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.","severity":{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00382,"percentile":0.32479,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-120"],"published":"2018-06-06T21:00:00Z","modified":"2026-06-17T02:00:52Z","products":[{"vendor":"google","product":"android"},{"vendor":"qualcomm, inc.","product":"android for msm, firefox os for msm, qrd android"}],"references":[{"url":"https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5840"},{"url":"https://source.android.com/security/bulletin/2018-05-01","tags":["Patch","Vendor Advisory"]},{"url":"https://github.com/advisories/GHSA-pvgr-wf54-pxhq"}],"sources":{"cve":[{"id":"CVE-2018-5840","description":"Buffer Copy without Checking Size of Input can occur during the DRM SDE driver initialization sequence in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.","status":"published","published":"2018-06-06T21:00:00Z","modified":"2024-09-16T21:08:15.391Z","updated_at":"2026-11-02T14:35:00.948726Z"}],"euvd":[{"id":"EUVD-2018-17607","description":"Buffer Copy without Checking Size of Input can occur during the DRM SDE driver initialization sequence in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.","status":"published","published":"2018-06-06T21:00:00Z","modified":"2024-09-16T21:08:15Z","updated_at":"2026-11-03T00:55:07.646084Z"}],"ghsa":[{"id":"GHSA-pvgr-wf54-pxhq","title":"Buffer Copy without Checking Size of Input can occur during the DRM SDE driver initialization...","description":"Buffer Copy without Checking Size of Input can occur during the DRM SDE driver initialization sequence in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.","status":"published","published":"2022-05-13T01:52:56Z","modified":"2023-02-02T05:02:07Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:51:21.790702Z"}],"nvd":[{"id":"CVE-2018-5840","description":"Buffer Copy without Checking Size of Input can occur during the DRM SDE driver initialization sequence in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.","status":"published","published":"2018-06-06T21:29:00.503Z","modified":"2026-06-17T02:00:52.667Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:04:28.483469Z"}]}}