Vulnerability Description
Insufficient memory allocation in boot due to incorrect size being passed could result in out of bounds access in Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in version FSM9055, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SDA660 and SDX20
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Qaulcomm | Fsm9055 Firmware | - |
| Qaulcomm | Fsm9055 | - |
| Qualcomm | Mdm9206 Firmware | - |
| Qualcomm | Mdm9206 | - |
| Qualcomm | Mdm9607 Firmware | - |
| Qualcomm | Mdm9607 | - |
| Qualcomm | Mdm9640 Firmware | - |
| Qualcomm | Mdm9640 | - |
| Qualcomm | Mdm9650 Firmware | - |
| Qualcomm | Mdm9650 | - |
| Qualcomm | Msm8909W Firmware | - |
| Qualcomm | Msm8909W | - |
| Qualcomm | Msm8996Au Firmware | - |
| Qualcomm | Msm8996Au | - |
| Qualcomm | Sd 210 Firmware | - |
| Qualcomm | Sd 210 | - |
| Qualcomm | Sd 212 Firmware | - |
| Qualcomm | Sd 212 | - |
| Qualcomm | Sd 205 Firmware | - |
| Qualcomm | Sd 205 | - |
Related Weaknesses (CWE)
References
- http://www.securitytracker.com/id/1041432Third Party AdvisoryVDB Entry
- https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-cThird Party Advisory
- https://www.qualcomm.com/company/product-security/bulletinsVendor Advisory
- http://www.securitytracker.com/id/1041432Third Party AdvisoryVDB Entry
- https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-cThird Party Advisory
- https://www.qualcomm.com/company/product-security/bulletinsVendor Advisory
FAQ
What is CVE-2017-18304?
CVE-2017-18304 is a vulnerability with a CVSS score of 7.8 (HIGH). Insufficient memory allocation in boot due to incorrect size being passed could result in out of bounds access in Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versio...
How severe is CVE-2017-18304?
CVE-2017-18304 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2017-18304?
Check the references section above for vendor advisories and patch information. Affected products include: Qaulcomm Fsm9055 Firmware, Qaulcomm Fsm9055, Qualcomm Mdm9206 Firmware, Qualcomm Mdm9206, Qualcomm Mdm9607 Firmware.