CVE-2017-18156

HIGH

Qualcomm MDM9206/MDM9607/MDM9650/MSM8996AU/SD 210/212/205/625/820/820A/835/SDX20 Firmware - Camera Driver Use-After-Free

Title source: llm

Description

While processing camera buffers in camera driver, a use after free condition can occur in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 625, SD 820, SD 820A, SD 835, SDX20.

References (1)

Core 1

Core References

Vendor Advisory x_refsource_misc

https://www.qualcomm.com/company/product-security/bulletins

Scores

CVSS v3 7.8

EPSS 0.0009

EPSS Percentile 25.3%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-416

Status published

Products (12)

qualcomm/mdm9206_firmware

qualcomm/mdm9607_firmware

qualcomm/mdm9650_firmware

qualcomm/msm8996au_firmware

qualcomm/sd_205_firmware

qualcomm/sd_210_firmware

qualcomm/sd_212_firmware

qualcomm/sd_625_firmware

qualcomm/sd_820_firmware

qualcomm/sd_820a_firmware

... and 2 more

Published May 06, 2019

Tracked Since Feb 18, 2026