{"id":"CVE-2018-5916","aliases":["EUVD-2018-17683","GHSA-4m5x-pmjc-pfvr"],"status":"published","title":"Buffer overread while decoding PDP modify request or network initiated secondary PDP activation...","description":"Buffer overread while decoding PDP modify request or network initiated secondary PDP activation in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDA845, SDX20, SXR1130.","severity":{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00373,"percentile":0.31521,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-125"],"published":"2018-11-28T15:00:00Z","modified":"2026-06-17T02:01:01Z","products":[{"vendor":"qualcomm","product":"mdm9206_firmware"},{"vendor":"qualcomm","product":"mdm9607_firmware"},{"vendor":"qualcomm","product":"mdm9615_firmware"},{"vendor":"qualcomm","product":"mdm9625_firmware"},{"vendor":"qualcomm","product":"mdm9635m_firmware"},{"vendor":"qualcomm","product":"mdm9640_firmware"},{"vendor":"qualcomm","product":"mdm9645_firmware"},{"vendor":"qualcomm","product":"mdm9650_firmware"},{"vendor":"qualcomm","product":"mdm9655_firmware"},{"vendor":"qualcomm","product":"msm8909w_firmware"},{"vendor":"qualcomm","product":"msm8996au_firmware"},{"vendor":"qualcomm","product":"sd_205_firmware"},{"vendor":"qualcomm","product":"sd_210_firmware"},{"vendor":"qualcomm","product":"sd_212_firmware"},{"vendor":"qualcomm","product":"sd_410_firmware"},{"vendor":"qualcomm","product":"sd_412_firmware"},{"vendor":"qualcomm","product":"sd_415_firmware"},{"vendor":"qualcomm","product":"sd_425_firmware"},{"vendor":"qualcomm","product":"sd_430_firmware"},{"vendor":"qualcomm","product":"sd_450_firmware"},{"vendor":"qualcomm","product":"sd_615_firmware"},{"vendor":"qualcomm","product":"sd_616_firmware"},{"vendor":"qualcomm","product":"sd_625_firmware"},{"vendor":"qualcomm","product":"sd_650_firmware"},{"vendor":"qualcomm","product":"sd_652_firmware"},{"vendor":"qualcomm","product":"sd_810_firmware"},{"vendor":"qualcomm","product":"sd_820_firmware"},{"vendor":"qualcomm","product":"sd_820a_firmware"},{"vendor":"qualcomm","product":"sd_835_firmware"},{"vendor":"qualcomm","product":"sd_845_firmware"},{"vendor":"qualcomm","product":"sd_850_firmware"},{"vendor":"qualcomm","product":"sda660_firmware"},{"vendor":"qualcomm","product":"sda845_firmware"},{"vendor":"qualcomm","product":"sdx20_firmware"},{"vendor":"qualcomm","product":"sxr1130_firmware"},{"vendor":"qualcomm, inc.","product":"snapdragon automobile, snapdragon mobile, snapdragon wear"}],"references":[{"url":"https://www.qualcomm.com/company/product-security/bulletins","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/105838","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5916"},{"url":"https://github.com/advisories/GHSA-4m5x-pmjc-pfvr"}],"sources":{"cve":[{"id":"CVE-2018-5916","description":"Buffer overread while decoding PDP modify request or network initiated secondary PDP activation in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDA845, SDX20, SXR1130.","status":"published","published":"2018-11-28T15:00:00Z","modified":"2024-08-05T05:47:56.188Z","updated_at":"2026-11-02T14:35:01.28843Z"}],"euvd":[{"id":"EUVD-2018-17683","description":"Buffer overread while decoding PDP modify request or network initiated secondary PDP activation in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDA845, SDX20, SXR1130.","status":"published","published":"2018-11-28T15:00:00Z","modified":"2024-08-05T05:47:56Z","updated_at":"2026-11-03T02:40:09.565883Z"}],"ghsa":[{"id":"GHSA-4m5x-pmjc-pfvr","title":"Buffer overread while decoding PDP modify request or network initiated secondary PDP activation...","description":"Buffer overread while decoding PDP modify request or network initiated secondary PDP activation in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDA845, SDX20, SXR1130.","status":"published","published":"2022-05-14T01:45:46Z","modified":"2023-02-02T05:04:27Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:51:52.696148Z"}],"nvd":[{"id":"CVE-2018-5916","description":"Buffer overread while decoding PDP modify request or network initiated secondary PDP activation in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDA845, SDX20, SXR1130.","status":"published","published":"2018-11-28T15:29:00.703Z","modified":"2026-06-17T02:01:01.357Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":6.1,"vector":"AV:A/AC:L/Au:N/C:C/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:04:48.987926Z"}]}}