Published: 23/10/2018 Updated: 10/12/2018

CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9

CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8

VMScore: 641

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Insufficient memory allocation in boot due to incorrect size being passed could result in out of bounds access in Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in version FSM9055, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SDA660 and SDX20

Vulnerable Product	Search on Vulmon	Subscribe to Product
qaulcomm fsm9055_firmware -
qualcomm mdm9206_firmware -
qualcomm mdm9607_firmware -
qualcomm mdm9640_firmware -
qualcomm mdm9650_firmware -
qualcomm msm8909w_firmware -
qualcomm msm8996au_firmware -
qualcomm sd_210_firmware -
qualcomm sd_212_firmware -
qualcomm sd_205_firmware -
qualcomm sd_425_firmware -
qualcomm sd_430_firmware -
qualcomm sd_450_firmware -
qualcomm sd_615_firmware -
qualcomm sd_616_firmware -
qualcomm sd_415_firmware -
qualcomm sd_617_firmware -
qualcomm sd_625_firmware -
qualcomm sd_650_firmware -
qualcomm sd_652_firmware -
qualcomm sd_810_firmware -
qualcomm sd_820_firmware -
qualcomm sd_820a_firmware -
qualcomm sd_835_firmware -
qualcomm sda660_firmware -
qualcomm sdx20_firmware -

CWE-125 https://www.qualcomm.com/company/product-security/bulletins https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components http://www.securitytracker.com/id/1041432 https://nvd.nist.gov

CVE-2017-18304

Vulnerability Summary

Vulnerability Trend

References

Vulmon Search

About

Products

Connect