CVEvulnerability
CVE-2017-18172
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2018-10-23
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-190
Description
In a device, with screen size 1440x2560, the check of contiguous buffer will overflow on certain buffer size resulting in an Integer Overflow or Wraparound in System UI in Snapdragon Automobile, Snapdragon Mobile in version MDM9635M, SD 400, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 810, SD 820, SD 820A, SD 835, SDM630, SDM636, SDM660, Snapdragon_High_Med_2016.
Affected configurations
• qualcomm mdm9635m firmware
• qualcomm sd 400 firmware
• qualcomm sd 410 firmware
• qualcomm sd 412 firmware
• qualcomm sd 425 firmware
• qualcomm sd 427 firmware
• qualcomm sd 430 firmware
• qualcomm sd 435 firmware
• qualcomm sd 450 firmware
• qualcomm sd 615 firmware
• qualcomm sd 616 firmware
• qualcomm sd 415 firmware
• qualcomm sd 625 firmware
• qualcomm sd 650 firmware
• qualcomm sd 652 firmware
• qualcomm sd 820 firmware
• qualcomm sd 835 firmware
• qualcomm sdm630 firmware
• qualcomm sdm636 firmware
• qualcomm sdm660 firmware
• qualcomm sd 617 firmware
• qualcomm sd 800 firmware
• qualcomm sd 810 firmware
• qualcomm sd 820a firmware
Related
Weakness · CWE (1)
- CWE-190 Integer Overflow or Wraparound weakness
References
- https://source.android.com/security/bulletin/2018-07-01#qualcomm-closed-source-components Vendor Advisory
- https://www.qualcomm.com/company/product-security/bulletins Vendor Advisory
- https://source.android.com/security/bulletin/2018-07-01#qualcomm-closed-source-components Vendor Advisory
- https://www.qualcomm.com/company/product-security/bulletins Vendor Advisory