CVE-2017-18274

While iterating through the models contained in a fixed-size array in the actData structure, which also stores an incorrect number of models that is greater than the size of the array, a buffer overflow occurs in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835

Score

CVSS 3.0 7.8 High

Status

Modified - product-security@qualcomm.com

Published

2019-05-06

Last modified

2024-08-05

Weaknesses

CWE-129

Affected products

• Mdm9206 Firmware (Qualcomm)
• Mdm9607 Firmware (Qualcomm)
• Mdm9650 Firmware (Qualcomm)
• Sd 205 Firmware (Qualcomm)
• Sd 210 Firmware (Qualcomm)
• Sd 212 Firmware (Qualcomm)
• Sd 425 Firmware (Qualcomm)
• Sd 430 Firmware (Qualcomm)
• Sd 450 Firmware (Qualcomm)
• Sd 617 Firmware (Qualcomm)
• Sd 625 Firmware (Qualcomm)
• Sd 650 Firmware (Qualcomm)
• Sd 652 Firmware (Qualcomm)
• Sd 820 Firmware (Qualcomm)
• Sd 820a Firmware (Qualcomm)
• Sd 835 Firmware (Qualcomm)
• Snapdragon Automobile (Qualcomm Technologies Inc.)
• Snapdragon Mobile (Qualcomm Technologies Inc.)
• Snapdragon Wear (Qualcomm Technologies Inc.)

References

• https://www.qualcomm.com/company/product-security/bulletins