CVEvulnerability
CVE-2017-18301
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2018-09-20
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.5 MEDIUM — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 4.9 MEDIUM — AV:L/AC:L/Au:N/C:N/I:N/A:C
- Weaknesses
- CWE-476
Description
In Small Cell SoC and Snapdragon (Automobile, Mobile, Wear) in version FSM9055, FSM9955, MDM9607, MDM9640, MDM9650, MSM8909W, SD 425, SD 427, SD 430, SD 435, SD 450, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SDM630, SDM636, SDM660, SDX20, Snapdragon_High_Med_2016, providing the NULL argument of ICE regulator while processing create key IOCTL results in system restart.
Affected configurations
• qualcomm fsm9055 firmware
• qualcomm fsm9955 firmware
• qualcomm mdm9607 firmware
• qualcomm mdm9640 firmware
• qualcomm mdm9650 firmware
• qualcomm msm8909w firmware
• qualcomm sd425 firmware
• qualcomm sd427 firmware
• qualcomm sd430 firmware
• qualcomm sd435 firmware
• qualcomm sd450 firmware
• qualcomm sd617 firmware
• qualcomm sd625 firmware
• qualcomm sd650 firmware
• qualcomm sd652 firmware
• qualcomm sd820 firmware
• qualcomm sd820a firmware
• qualcomm sd835 firmware
• qualcomm sd845 firmware
• qualcomm sdm630 firmware
• qualcomm sdm636 firmware
• qualcomm sdm660 firmware
• qualcomm sdx20 firmware
Related
Weakness · CWE (1)
- CWE-476 NULL Pointer Dereference weakness
References
- http://www.securitytracker.com/id/1041432 Third Party Advisory, VDB Entry
- https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components Vendor Advisory
- https://www.qualcomm.com/company/product-security/bulletins Vendor Advisory
- http://www.securitytracker.com/id/1041432 Third Party Advisory, VDB Entry
- https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components Vendor Advisory
- https://www.qualcomm.com/company/product-security/bulletins Vendor Advisory