CVE-2017-18283 — Improper Restriction of Operations within the Bounds of a Memory Buffer in INC Snapdragon Mobile

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer3 documents3 sources
Severity
6.5MEDIUMNVD
EPSS
0.4%
top 41.97%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Qualcomm INC Snapdragon MobileGoogle Android
Timeline
PublishedOct 23
Latest updateMay 13

Description

Possible memory corruption when Read Val Blob Req is received with invalid parameters in Snapdragon Mobile in version QCA9379, SD 210/SD 212/SD 205, SD 625, SD 835, SD 845, SD 850, SDA660.

CVSS vector

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 2.8 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5qualcomm_inc/snapdragon_mobileQCA9379, SD 210/SD 212/SD 205, SD 625, SD 835, SD 845, SD 850, SDA660

🔴Vulnerability Details

1
GHSA
GHSA-23wg-mwgh-c5w5: Possible memory corruption when Read Val Blob Req is received with invalid parameters in Snapdragon Mobile in version QCA9379, SD 210/SD 212/SD 205, S↗2022-05-13
▶

📋Vendor Advisories

1
Android
CVE-2017-18283: Closed-source component↗2018-08-01
▶