CVE-2017-18299

MEDIUM

Qualcomm Snapdragon Firmware - Denial of Service via Translation Table Consolidation Logic

Title source: llm

Description

Improper translation table consolidation logic leads to resource exhaustion and QSEE error in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in version MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660

References (3)

Core 3

Core References

Vendor Advisory x_refsource_confirm

https://www.qualcomm.com/company/product-security/bulletins

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1041432

Third Party Advisory x_refsource_confirm

https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components

Scores

CVSS v3 5.5

EPSS 0.0005

EPSS Percentile 16.8%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE

CWE-400

Status published

Products (19)

qualcomm/mdm9206_firmware

qualcomm/mdm9607_firmware

qualcomm/mdm9650_firmware

qualcomm/msm8996au_firmware

qualcomm/sd_205_firmware

qualcomm/sd_210_firmware

qualcomm/sd_212_firmware

qualcomm/sd_425_firmware

qualcomm/sd_430_firmware

qualcomm/sd_450_firmware

... and 9 more

Published Oct 23, 2018

Tracked Since Feb 18, 2026