CVE-2018-5868

Name of the Vulnerable Software and Affected Versions Qualcomm Widevine versions in MSM8996AU, SD 425, SD 430, SD 450, SD 625, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDX24, SXR1130

Description The issue is related to a lack of input size checking, which can lead to a buffer overflow in Qualcomm Widevine. This can be exploited to cause a buffer overflow in memory.

Recommendations For versions MSM8996AU, SD 425, SD 430, SD 450, SD 625, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDX24, SXR1130, consider disabling the vulnerable component until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.