NetSight
high7.8

CVE-2017-18173

In case of using an invalid android verified boot signature with very large length, an integer underflow occurs in Snapdragon Mobile in SD 425, SD 427, SD 430,…

Impact

In case of using an invalid android verified boot signature with very large length, an integer underflow occurs in Snapdragon Mobile in SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 810, SD 820, SD 835, SDM630, SDM636, SDM660, Snapdragon_High_Med_2016.

Affected products

VendorProductAffected versions
QualcommSd 425 Firmware
All versions
QualcommSd 427 Firmware
All versions
QualcommSd 430 Firmware
All versions
QualcommSd 435 Firmware
All versions
QualcommSd 450 Firmware
All versions
QualcommSd 625 Firmware
All versions
QualcommSd 810 Firmware
All versions
QualcommSd 820 Firmware
All versions
QualcommSd 835 Firmware
All versions
QualcommSdm630 Firmware
All versions
QualcommSdm636 Firmware
All versions
QualcommSdm660 Firmware
All versions

Weakness classification

References