8.4
CVE-2017-18153
- EPSS 0.05%
- Veröffentlicht 26.11.2024 09:15:04
- Zuletzt bearbeitet 09.01.2025 20:50:28
- Quelle product-security@qualcomm.com
- Teams Watchlist Login
- Unerledigt Login
A race condition exists in a driver potentially leading to a use-after-free condition.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ 9206 Lte Modem Firmware Version-
Qualcomm ≫ Apq8017 Firmware Version-
Qualcomm ≫ Ar6003 Firmware Version-
Qualcomm ≫ Snapdragon 630 Mobile Firmware Version-
Qualcomm ≫ Snapdragon 636 Mobile Firmware Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.05% | 0.153 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7 | 1 | 5.9 |
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
|
| product-security@qualcomm.com | 8.4 | 2.5 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
CWE-416 Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.