CVE-2017-18172

HIGH

Qualcomm Snapdragon Firmware - Integer Overflow in System UI Buffer Size Check

Title source: llm
STIX 2.1

Description

In a device, with screen size 1440x2560, the check of contiguous buffer will overflow on certain buffer size resulting in an Integer Overflow or Wraparound in System UI in Snapdragon Automobile, Snapdragon Mobile in version MDM9635M, SD 400, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 810, SD 820, SD 820A, SD 835, SDM630, SDM636, SDM660, Snapdragon_High_Med_2016.

References (2)

Core 2

Scores

CVSS v3 7.8
EPSS 0.0008
EPSS Percentile 23.9%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-190
Status published
Products (24)
qualcomm/mdm9635m_firmware
qualcomm/sd_400_firmware
qualcomm/sd_410_firmware
qualcomm/sd_412_firmware
qualcomm/sd_415_firmware
qualcomm/sd_425_firmware
qualcomm/sd_427_firmware
qualcomm/sd_430_firmware
qualcomm/sd_435_firmware
qualcomm/sd_450_firmware
... and 14 more
Published Oct 23, 2018
Tracked Since Feb 18, 2026