8.8

CVE-2017-18170

Improper input validation in Bluetooth Controller function can lead to possible memory corruption in Snapdragon Mobile in version QCA9379, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 835, SD 845, SD 850, SDM630, SDM636, SDM660, SDM710, Snapdragon_High_Med_2016.

Data is provided by the National Vulnerability Database (NVD)
Qualcomm ≫ Qca9379 Firmware Version-
   Qualcomm ≫ Qca9379 Version-
Qualcomm ≫ Sd 210 Firmware Version-
   Qualcomm ≫ Sd 210 Version-
Qualcomm ≫ Sd 212 Firmware Version-
   Qualcomm ≫ Sd 212 Version-
Qualcomm ≫ Sd 205 Firmware Version-
   Qualcomm ≫ Sd 205 Version-
Qualcomm ≫ Sd 410 Firmware Version-
   Qualcomm ≫ Sd 410 Version-
Qualcomm ≫ Sd 412 Firmware Version-
   Qualcomm ≫ Sd 412 Version-
Qualcomm ≫ Sd 425 Firmware Version-
   Qualcomm ≫ Sd 425 Version-
Qualcomm ≫ Sd 427 Firmware Version-
   Qualcomm ≫ Sd 427 Version-
Qualcomm ≫ Sd 430 Firmware Version-
   Qualcomm ≫ Sd 430 Version-
Qualcomm ≫ Sd 435 Firmware Version-
   Qualcomm ≫ Sd 435 Version-
Qualcomm ≫ Sd 450 Firmware Version-
   Qualcomm ≫ Sd 450 Version-
Qualcomm ≫ Sd 615 Firmware Version-
   Qualcomm ≫ Sd 615 Version-
Qualcomm ≫ Sd 616 Firmware Version-
   Qualcomm ≫ Sd 616 Version-
Qualcomm ≫ Sd 415 Firmware Version-
   Qualcomm ≫ Sd 415 Version-
Qualcomm ≫ Sd 625 Firmware Version-
   Qualcomm ≫ Sd 625 Version-
Qualcomm ≫ Sd 650 Firmware Version-
   Qualcomm ≫ Sd 650 Version-
Qualcomm ≫ Sd 652 Firmware Version-
   Qualcomm ≫ Sd 652 Version-
Qualcomm ≫ Sd 820 Firmware Version-
   Qualcomm ≫ Sd 820 Version-
Qualcomm ≫ Sd 835 Firmware Version-
   Qualcomm ≫ Sd 835 Version-
Qualcomm ≫ Sd 845 Firmware Version-
   Qualcomm ≫ Sd 845 Version-
Qualcomm ≫ Sd 850 Firmware Version-
   Qualcomm ≫ Sd 850 Version-
Qualcomm ≫ Sdm630 Firmware Version-
   Qualcomm ≫ Sdm630 Version-
Qualcomm ≫ Sdm636 Firmware Version-
   Qualcomm ≫ Sdm636 Version-
Qualcomm ≫ Sdm660 Firmware Version-
   Qualcomm ≫ Sdm660 Version-
Qualcomm ≫ Sdm710 Firmware Version-
   Qualcomm ≫ Sdm710 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.07% 0.194
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 8.8 2.8 5.9
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 8.3 6.5 10
AV:A/AC:L/Au:N/C:C/I:C/A:C
CWE-191 Integer Underflow (Wrap or Wraparound)

The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.