CVE-2018-5914: Qualcomm MDM9206 Firmware

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Improper input validation in TZ led to array out of bound in TZ function while accessing the peripheral details using the incoming data in Snapdragon Mobile, Snapdragon Wear version MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 835, SDA660.

Affected products

• Qualcomm MDM9206 Firmware: affected versions not specified
• Qualcomm MDM9607 Firmware: affected versions not specified
• Qualcomm MDM9650 Firmware: affected versions not specified
• Qualcomm Sd 205 Firmware: affected versions not specified
• Qualcomm Sd 210 Firmware: affected versions not specified
• Qualcomm Sd 212 Firmware: affected versions not specified
• Qualcomm Sd 425 Firmware: affected versions not specified
• Qualcomm Sd 430 Firmware: affected versions not specified
• Qualcomm Sd 450 Firmware: affected versions not specified
• Qualcomm Sd 625 Firmware: affected versions not specified
• Qualcomm Sd 650 Firmware: affected versions not specified
• Qualcomm Sd 652 Firmware: affected versions not specified
• Qualcomm Sd 835 Firmware: affected versions not specified
• Qualcomm SDA660 Firmware: affected versions not specified

Published 2018-10-26. Last modified 2026-06-17.