Description
In all Qualcomm products with Android releases from CAF using the Linux kernel, disabling asserts causes an instruction inside of an assert to not be executed resulting in incorrect control flow.
References (3)
Core 3
Core References
Vendor Advisory x_refsource_confirm
https://source.android.com/security/bulletin/2017-07-01
Vendor Advisory x_refsource_confirm
https://source.android.com/security/bulletin/2018-04-01
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/103671
Scores
CVSS v3
9.8
EPSS
0.0029
EPSS Percentile
52.2%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-20
Status
published
Products (2)
google/android
Qualcomm, Inc./Snapdragon Mobile
MDM9635M, SD 835
Published
Aug 18, 2017
Tracked Since
Feb 18, 2026