CVE-2017-18155

While playing HEVC content using HD DMB in Snapdragon Automobile and Snapdragon Mobile in version MSM8996AU, SD 450, SD 625, SD 820, SD 820A, SD 835, an uninitialized variable can be used leading to a kernel fault.

Score

CVSS 3.0 7.8 High

Status

Modified - product-security@qualcomm.com

Published

2018-07-12

Last modified

2024-09-16

Weaknesses

CWE-20

Affected products

• Msm8996au Firmware (Qualcomm)
• Sd 450 Firmware (Qualcomm)
• Sd 625 Firmware (Qualcomm)
• Sd 820 Firmware (Qualcomm)
• Sd 820a Firmware (Qualcomm)
• Sd 835 Firmware (Qualcomm)
• Snapdragon Automobile (Qualcomm Inc.)
• Snapdragon Mobile (Qualcomm Inc.)

References

• https://source.android.com/security/bulletin/2018-06-01#qualcomm-components