NetSight
critical9.8

CVE-2017-18136

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9635M…

Impact

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9635M, MDM9640, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 820, SD 820A, SD 835, SD 845, in the omx aac component, a Use After Free condition may potentially occur.

Affected products

VendorProductAffected versions
QualcommMdm9206 Firmware
All versions
QualcommMdm9607 Firmware
All versions
QualcommMdm9615 Firmware
All versions
QualcommMdm9635m Firmware
All versions
QualcommMdm9640 Firmware
All versions
QualcommMdm9650 Firmware
All versions
QualcommMsm8909w Firmware
All versions
QualcommSd 210 Firmware
All versions
QualcommSd 212 Firmware
All versions
QualcommSd 205 Firmware
All versions
QualcommSd 400 Firmware
All versions
QualcommSd 425 Firmware
All versions

Weakness classification

References