CVE-2018-5871 Details
Description
In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6574AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820A, SD 835, SD 845, SD 850, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, SDM710, Snapdragon_High_Med_2016, MAC address randomization performed during probe requests (for privacy reasons) is not done properly due to a flawed RNG which produces repeating output much earlier than expected.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://source.android.com/security/bulletin/2018-09-01#qualcomm-closed-source-components | CVE | Third Party Advisory |
| https://www.qualcomm.com/company/product-security/bulletins | CVE | Vendor Advisory |
| https://source.android.com/security/bulletin/2018-09-01#qualcomm-closed-source-components | [email protected] | Third Party Advisory |
| https://www.qualcomm.com/company/product-security/bulletins | [email protected] | Vendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-338 | Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| qualcomm mdm9206 firmware | All versions |
CPE
Remediation
| |
| qualcomm mdm9206 | All versions |
CPE
Remediation
| |
| qualcomm mdm9607 firmware | All versions |
CPE
Remediation
| |
| qualcomm mdm9607 | All versions |
CPE
Remediation
| |
| qualcomm mdm9640 firmware | All versions |
CPE
Remediation
| |
| qualcomm mdm9640 | All versions |
CPE
Remediation
| |
| qualcomm mdm9650 firmware | All versions |
CPE
Remediation
| |
| qualcomm mdm9650 | All versions |
CPE
Remediation
| |
| qualcomm msm8996au firmware | All versions |
CPE
Remediation
| |
| qualcomm msm8996au | All versions |
CPE
Remediation
| |
| qualcomm qca6574au firmware | All versions |
CPE
Remediation
| |
| qualcomm qca6574au | All versions |
CPE
Remediation
| |
| qualcomm sd210 firmware | All versions |
CPE
Remediation
| |
| qualcomm sd210 | All versions |
CPE
Remediation
| |
| qualcomm sd212 firmware | All versions |
CPE
Remediation
| |
| qualcomm sd212 | All versions |
CPE
Remediation
| |
| qualcomm sd205 firmware | All versions |
CPE
Remediation
| |
| qualcomm sd205 | All versions |
CPE
Remediation
| |
| qualcomm sd425 firmware | All versions |
CPE
Remediation
| |
| qualcomm sd425 | All versions |
CPE
Remediation
| |
| qualcomm sd427 firmware | All versions |
CPE
Remediation
| |
| qualcomm sd427 | All versions |
CPE
Remediation
| |
| qualcomm sd430 firmware | All versions |
CPE
Remediation
| |
| qualcomm sd430 | All versions |
CPE
Remediation
| |
| qualcomm sd435 firmware | All versions |
CPE
Remediation
| |
| qualcomm sd435 | All versions |
CPE
Remediation
| |
| qualcomm sd450 firmware | All versions |
CPE
Remediation
| |
| qualcomm sd450 | All versions |
CPE
Remediation
| |
| qualcomm sd615 firmware | All versions |
CPE
Remediation
| |
| qualcomm sd615 | All versions |
CPE
Remediation
| |
| qualcomm sd616 firmware | All versions |
CPE
Remediation
| |
| qualcomm sd616 | All versions |
CPE
Remediation
| |
| qualcomm sd415 firmware | All versions |
CPE
Remediation
| |
| qualcomm sd415 | All versions |
CPE
Remediation
| |
| qualcomm sd650 firmware | All versions |
CPE
Remediation
| |
| qualcomm sd650 | All versions |
CPE
Remediation
| |
| qualcomm sd652 firmware | All versions |
CPE
Remediation
| |
| qualcomm sd652 | All versions |
CPE
Remediation
| |
| qualcomm sd820a firmware | All versions |
CPE
Remediation
| |
| qualcomm sd820a | All versions |
CPE
Remediation
| |
| qualcomm sd835 firmware | All versions |
CPE
Remediation
| |
| qualcomm sd835 | All versions |
CPE
Remediation
| |
| qualcomm sd845 firmware | All versions |
CPE
Remediation
| |
| qualcomm sd845 | All versions |
CPE
Remediation
| |
| qualcomm sd850 firmware | All versions |
CPE
Remediation
| |
| qualcomm sd850 | All versions |
CPE
Remediation
| |
| qualcomm sda660 firmware | All versions |
CPE
Remediation
| |
| qualcomm sda660 | All versions |
CPE
Remediation
| |
| qualcomm sdm429 firmware | All versions |
CPE
Remediation
| |
| qualcomm sdm429 | All versions |
CPE
Remediation
| |
| qualcomm sdm439 firmware | All versions |
CPE
Remediation
| |
| qualcomm sdm439 | All versions |
CPE
Remediation
| |
| qualcomm sdm630 firmware | All versions |
CPE
Remediation
| |
| qualcomm sdm630 | All versions |
CPE
Remediation
| |
| qualcomm sdm632 firmware | All versions |
CPE
Remediation
| |
| qualcomm sdm632 | All versions |
CPE
Remediation
| |
| qualcomm sdm636 firmware | All versions |
CPE
Remediation
| |
| qualcomm sdm636 | All versions |
CPE
Remediation
| |
| qualcomm sdm660 firmware | All versions |
CPE
Remediation
| |
| qualcomm sdm660 | All versions |
CPE
Remediation
| |
| qualcomm sdm710 firmware | All versions |
CPE
Remediation
| |
| qualcomm sdm710 | All versions |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| May 14, 2024 | CVE Modified | [email protected] |
| Oct 3, 2019 | CWE Remap | [email protected] |
| Nov 23, 2018 | Initial Analysis | [email protected] |