CVE-2017-14913

In Android before 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile MDM9206, SD 625, SD 650/52, SD 835, SD 845, DDR address input validation is being improperly truncated.

Score

CVSS 3.0 9.8 Critical

Status

Modified - product-security@qualcomm.com

Published

2018-03-30

Last modified

2024-09-16

Weaknesses

CWE-20

Affected products

• Mdm9206 Firmware (Qualcomm)
• Sd 625 Firmware (Qualcomm)
• Sd 650 Firmware (Qualcomm)
• Sd 652 Firmware (Qualcomm)
• Sd 835 Firmware (Qualcomm)
• Sd 845 Firmware (Qualcomm)
• Snapdragon Iot (Qualcomm Inc.)
• Snapdragon Mobile (Qualcomm Inc.)

References

• http://www.securityfocus.com/bid/102386
• http://www.securitytracker.com/id/1040106
• https://source.android.com/security/bulletin/2018-01-01