CVE-2017-18124

HIGH

Qualcomm Small Cell SoC, Snapdragon Automobile, Mobile, Wear - Memory Corruption via Secure Boot

Title source: llm
STIX 2.1

Description

During secure boot, addition is performed on uint8 ptrs which led to overflow issue in Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version FSM9055, IPQ4019, MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDX20

References (1)

Core 1
Core References

Scores

CVSS v3 7.8
EPSS 0.0010
EPSS Percentile 27.4%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-119
Status published
Products (36)
qualcomm/fsm9055_firmware
qualcomm/ipq4019_firmware
qualcomm/mdm9206_firmware
qualcomm/mdm9607_firmware
qualcomm/mdm9625_firmware
qualcomm/mdm9635m_firmware
qualcomm/mdm9640_firmware
qualcomm/mdm9645_firmware
qualcomm/mdm9650_firmware
qualcomm/mdm9655_firmware
... and 26 more
Published Oct 26, 2018
Tracked Since Feb 18, 2026