CVE-2017-18283

moderate-risk

Published 2018-10-23

Possible memory corruption when Read Val Blob Req is received with invalid parameters in Snapdragon Mobile in version QCA9379, SD 210/SD 212/SD 205, SD 625, SD 835, SD 845, SD 850, SDA660.

Do I need to act?

0.36% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 6.5/10 Medium

ADJACENT_NETWORK / LOW complexity

Affected Products (9)

Qca9379 Firmware

Sd 210 Firmware

Sd 212 Firmware

Sd 205 Firmware

Sd 625 Firmware

Sd 835 Firmware

Sd 845 Firmware

Sd 850 Firmware

Sda660 Firmware

Affected Vendors

Qualcomm

References (6)

Third Party Advisory http://www.securitytracker.com/id/1041432

Third Party Advisory https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-c...

Vendor Advisory https://www.qualcomm.com/company/product-security/bulletins

Third Party Advisory http://www.securitytracker.com/id/1041432

Third Party Advisory https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-c...

Vendor Advisory https://www.qualcomm.com/company/product-security/bulletins

/ 100

moderate-risk

Severity 21/34 · High

Exploitability 1/34 · Minimal

Exposure 15/34 · Moderate