CVE-2018-5881: Qualcomm MDM9206 Firmware

High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Improper validation of buffer length checks in the lwm2m device management protocol can leads to a buffer overflow in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 835, SDA660, SDM630, SDM660

Affected products

• Qualcomm MDM9206 Firmware: affected versions not specified
• Qualcomm MDM9607 Firmware: affected versions not specified
• Qualcomm Sd 205 Firmware: affected versions not specified
• Qualcomm Sd 210 Firmware: affected versions not specified
• Qualcomm Sd 212 Firmware: affected versions not specified
• Qualcomm Sd 425 Firmware: affected versions not specified
• Qualcomm Sd 427 Firmware: affected versions not specified
• Qualcomm Sd 430 Firmware: affected versions not specified
• Qualcomm Sd 435 Firmware: affected versions not specified
• Qualcomm Sd 450 Firmware: affected versions not specified
• Qualcomm Sd 625 Firmware: affected versions not specified
• Qualcomm Sd 636 Firmware: affected versions not specified
• Qualcomm Sd 835 Firmware: affected versions not specified
• Qualcomm SDA660 Firmware: affected versions not specified
• Qualcomm SDM630 Firmware: affected versions not specified
• Qualcomm SDM660 Firmware: affected versions not specified

Published 2019-01-18. Last modified 2026-06-17.