CVE-2017-18303

Published: 23/10/2018 Updated: 10/12/2018

CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9

CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8

VMScore: 641

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

While processing the sensors registry configuration file, if inputs are not validated a buffer overflow will occur in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MMDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 810, SD 820, SD 820A, SD 835, SDA660, SDX20.

Vulnerable Product	Search on Vulmon	Subscribe to Product
qualcomm mdm9206_firmware -
qualcomm mdm9607_firmware -
qualcomm mdm9650_firmware -
qualcomm msm8909w_firmware -
qualcomm msm8996au_firmware -
qualcomm sd_210_firmware -
qualcomm sd_212_firmware -
qualcomm sd_205_firmware -
qualcomm sd_425_firmware -
qualcomm sd_430_firmware -
qualcomm sd_450_firmware -
qualcomm sd_600_firmware -
qualcomm sd_615_firmware -
qualcomm sd_616_firmware -
qualcomm sd_415_firmware -
qualcomm sd_617_firmware -
qualcomm sd_625_firmware -
qualcomm sd_650_firmware -
qualcomm sd_652_firmware -
qualcomm sd_800_firmware -
qualcomm sd_810_firmware -
qualcomm sd_820_firmware -
qualcomm sd_820a_firmware -
qualcomm sd_835_firmware -
qualcomm sda660_firmware -
qualcomm sdx20_firmware -

CWE-119 https://www.qualcomm.com/company/product-security/bulletins https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components http://www.securitytracker.com/id/1041432 https://nvd.nist.gov

CVE-2017-18303

Vulnerability Summary

Vulnerability Trend

References

Vulmon Search

About

Products

Connect