CVE-2017-18279

HIGH

Qualcomm Small Cell SoC, Snapdragon Mobile, Snapdragon Wear - Buffer Overflow in Camera Module

Title source: llm
STIX 2.1

Description

Lack of check of buffer length before copying can lead to buffer overflow in camera module in Small Cell SoC, Snapdragon Mobile, Snapdragon Wear in FSM9055, FSM9955, IPQ4019, IPQ8064, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCA9531, QCA9558, QCA9563, QCA9880, QCA9886, QCA9980, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 800, SD 810, SD 820, SD 835, SDM630, SDM636, SDM660, SDX20, Snapdragon_High_Med_2016.

References (1)

Core 1
Core References

Scores

CVSS v3 7.8
EPSS 0.0010
EPSS Percentile 26.7%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-190
Status published
Products (39)
qualcomm/fsm9055_firmware
qualcomm/fsm9955_firmware
qualcomm/ipq4019_firmware
qualcomm/ipq8064_firmware
qualcomm/mdm9206_firmware
qualcomm/mdm9607_firmware
qualcomm/mdm9640_firmware
qualcomm/mdm9650_firmware
qualcomm/msm8909w_firmware
qualcomm/msm8996au_firmware
... and 29 more
Published May 06, 2019
Tracked Since Feb 18, 2026