# CVE-2018-5852

## Summary

- **CVE ID:** CVE-2018-5852
- **Severity:** HIGH
- **CVSS Score:** 8.4 (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
- **CWE:** CWE-126
- **Published:** Nov 26, 2024
- **Last Modified:** Mar 14, 2026

## Description

An unsigned integer underflow vulnerability in IPA driver result into a buffer over-read while reading NAT entry using debugfs command 'cat /sys/kernel/debug/ipa/ip4_nat'

## Affected Products

- Qualcomm, Inc. — Snapdragon (MDM9206)
- Qualcomm, Inc. — Snapdragon (MDM9607)
- Qualcomm, Inc. — Snapdragon (MDM9640)
- Qualcomm, Inc. — Snapdragon (MDM9650)
- Qualcomm, Inc. — Snapdragon (MSM8909W)
- Qualcomm, Inc. — Snapdragon (SD 210/SD 212/SD 205)
- Qualcomm, Inc. — Snapdragon (SD 425)
- Qualcomm, Inc. — Snapdragon (SD 430)
- Qualcomm, Inc. — Snapdragon (SD 450)
- Qualcomm, Inc. — Snapdragon (SD 615/16/SD 415)
- Qualcomm, Inc. — Snapdragon (SD 617)
- Qualcomm, Inc. — Snapdragon (SD 625)
- Qualcomm, Inc. — Snapdragon (SD 650/52)
- Qualcomm, Inc. — Snapdragon (SD 810)
- Qualcomm, Inc. — Snapdragon (SD 820)
- Qualcomm, Inc. — Snapdragon (SD 820A)
- Qualcomm, Inc. — Snapdragon (SD 835)
- Qualcomm, Inc. — Snapdragon (SD 845)

## References

- [CNA](https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2018-bulletin.html)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.04%
- **EPSS Percentile:** 12.4

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-18._