NetSight
critical9.8

CVE-2017-18137

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile MDM9640, MDM9645, MDM9650, MDM9655, SD 450, SD 625, SD 650/52, SD 810, SD 820, …

Impact

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile MDM9640, MDM9645, MDM9650, MDM9655, SD 450, SD 625, SD 650/52, SD 810, SD 820, SD 835, while processing the IPv6 pdp address of the pdp context, a buffer overflow can occur.

Affected products

VendorProductAffected versions
QualcommMdm9640 Firmware
All versions
QualcommMdm9645 Firmware
All versions
QualcommMdm9650 Firmware
All versions
QualcommMdm9655 Firmware
All versions
QualcommSd 450 Firmware
All versions
QualcommSd 625 Firmware
All versions
QualcommSd 650 Firmware
All versions
QualcommSd 652 Firmware
All versions
QualcommSd 810 Firmware
All versions
QualcommSd 820 Firmware
All versions
QualcommSd 835 Firmware
All versions

Weakness classification

References