{"id":"CVE-2018-5912","aliases":["EUVD-2018-17679","GHSA-xf35-wvpj-g87q"],"status":"published","title":"Potential buffer overflow in Video due to lack of input validation in input and output values in...","description":"Potential buffer overflow in Video due to lack of input validation in input and output values in Snapdragon Automobile, Snapdragon Mobile in MSM8996AU, SD 450, SD 625, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660","severity":{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00228,"percentile":0.13579,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-119"],"published":"2018-11-28T15:00:00Z","modified":"2026-06-17T02:01:00Z","products":[{"vendor":"qualcomm","product":"msm8996au_firmware"},{"vendor":"qualcomm","product":"sd_450_firmware"},{"vendor":"qualcomm","product":"sd_625_firmware"},{"vendor":"qualcomm","product":"sd_820_firmware"},{"vendor":"qualcomm","product":"sd_820a_firmware"},{"vendor":"qualcomm","product":"sd_835_firmware"},{"vendor":"qualcomm","product":"sd_845_firmware"},{"vendor":"qualcomm","product":"sd_850_firmware"},{"vendor":"qualcomm","product":"sda660_firmware"},{"vendor":"qualcomm, inc.","product":"snapdragon automobile, snapdragon mobile"}],"references":[{"url":"https://www.qualcomm.com/company/product-security/bulletins","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5912"},{"url":"https://github.com/advisories/GHSA-xf35-wvpj-g87q"}],"sources":{"cve":[{"id":"CVE-2018-5912","description":"Potential buffer overflow in Video due to lack of input validation in input and output values in Snapdragon Automobile, Snapdragon Mobile in MSM8996AU, SD 450, SD 625, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660","status":"published","published":"2018-11-28T15:00:00Z","modified":"2024-08-05T05:47:56.184Z","updated_at":"2026-11-02T14:35:00.948726Z"}],"euvd":[{"id":"EUVD-2018-17679","description":"Potential buffer overflow in Video due to lack of input validation in input and output values in Snapdragon Automobile, Snapdragon Mobile in MSM8996AU, SD 450, SD 625, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660","status":"published","published":"2018-11-28T15:00:00Z","modified":"2024-08-05T05:47:56Z","updated_at":"2026-11-03T02:40:09.565883Z"}],"ghsa":[{"id":"GHSA-xf35-wvpj-g87q","title":"Potential buffer overflow in Video due to lack of input validation in input and output values in...","description":"Potential buffer overflow in Video due to lack of input validation in input and output values in Snapdragon Automobile, Snapdragon Mobile in MSM8996AU, SD 450, SD 625, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660","status":"published","published":"2022-05-14T00:58:26Z","modified":"2023-02-02T05:02:47Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:51:30.862811Z"}],"nvd":[{"id":"CVE-2018-5912","description":"Potential buffer overflow in Video due to lack of input validation in input and output values in Snapdragon Automobile, Snapdragon Mobile in MSM8996AU, SD 450, SD 625, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660","status":"published","published":"2018-11-28T15:29:00.657Z","modified":"2026-06-17T02:01:00.823Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:04:48.987926Z"}]}}