CVE-2018-5852

An unsigned integer underflow vulnerability in IPA driver result into a buffer over-read while reading NAT entry using debugfs command 'cat /sys/kernel/debug/ipa/ip4_nat'

Scoring

Severity

HIGH

CVSS base score

8.4

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS probability

0.04%

CWE

CWE-126

Published

2024-11-26

Last modified

2026-03-14

Affected products

• Qualcomm, Inc. Snapdragon
• Qualcomm, Inc. Snapdragon
• Qualcomm, Inc. Snapdragon
• Qualcomm, Inc. Snapdragon
• Qualcomm, Inc. Snapdragon
• Qualcomm, Inc. Snapdragon
• Qualcomm, Inc. Snapdragon
• Qualcomm, Inc. Snapdragon

Weakness type

• CWE-126

Related vulnerabilities

• CVE-2017-17772 — Multiple buffer overread vulnerabilities in WLAN
• CVE-2025-60003 — Junos OS and Junos OS Evolved: BGP update with a set of specific attributes causes rpd crash
• CVE-2024-33056 — Buffer Over-read in MProc
• CVE-2024-33047 — Buffer Over-read in Display
• CVE-2024-45552 — Buffer Over-read in Data Network Stack & Connectivity
• CVE-2025-21488 — Buffer Over-read in Data Network Stack & Connectivity
• CVE-2025-21487 — Buffer Over-read in Data Network Stack & Connectivity
• CVE-2025-21484 — Buffer Over-read in Data Network Stack & Connectivity

Markdown version · Browse all CVEs