5.5

CVE-2017-18301

In Small Cell SoC and Snapdragon (Automobile, Mobile, Wear) in version FSM9055, FSM9955, MDM9607, MDM9640, MDM9650, MSM8909W, SD 425, SD 427, SD 430, SD 435, SD 450, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SDM630, SDM636, SDM660, SDX20, Snapdragon_High_Med_2016, providing the NULL argument of ICE regulator while processing create key IOCTL results in system restart.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ Fsm9055 Firmware Version -
   Qualcomm ≫ Fsm9055 Version -
Qualcomm ≫ Fsm9955 Firmware Version -
   Qualcomm ≫ Fsm9955 Version -
Qualcomm ≫ Mdm9607 Firmware Version -
   Qualcomm ≫ Mdm9607 Version -
Qualcomm ≫ Mdm9640 Firmware Version -
   Qualcomm ≫ Mdm9640 Version -
Qualcomm ≫ Mdm9650 Firmware Version -
   Qualcomm ≫ Mdm9650 Version -
Qualcomm ≫ Msm8909w Firmware Version -
   Qualcomm ≫ Msm8909w Version -
Qualcomm ≫ Sd425 Firmware Version -
   Qualcomm ≫ Sd425 Version -
Qualcomm ≫ Sd427 Firmware Version -
   Qualcomm ≫ Sd427 Version -
Qualcomm ≫ Sd430 Firmware Version -
   Qualcomm ≫ Sd430 Version -
Qualcomm ≫ Sd435 Firmware Version -
   Qualcomm ≫ Sd435 Version -
Qualcomm ≫ Sd450 Firmware Version -
   Qualcomm ≫ Sd450 Version -
Qualcomm ≫ Sd617 Firmware Version -
   Qualcomm ≫ Sd617 Version -
Qualcomm ≫ Sd625 Firmware Version -
   Qualcomm ≫ Sd625 Version -
Qualcomm ≫ Sd650 Firmware Version -
   Qualcomm ≫ Sd650 Version -
Qualcomm ≫ Sd652 Firmware Version -
   Qualcomm ≫ Sd652 Version -
Qualcomm ≫ Sd820 Firmware Version -
   Qualcomm ≫ Sd820 Version -
Qualcomm ≫ Sd820a Firmware Version -
   Qualcomm ≫ Sd820a Version -
Qualcomm ≫ Sd835 Firmware Version -
   Qualcomm ≫ Sd835 Version -
Qualcomm ≫ Sd845 Firmware Version -
   Qualcomm ≫ Sd845 Version -
Qualcomm ≫ Sdm630 Firmware Version -
   Qualcomm ≫ Sdm630 Version -
Qualcomm ≫ Sdm636 Firmware Version -
   Qualcomm ≫ Sdm636 Version -
Qualcomm ≫ Sdm660 Firmware Version -
   Qualcomm ≫ Sdm660 Version -
Qualcomm ≫ Sdx20 Firmware Version -
   Qualcomm ≫ Sdx20 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.24% 0.146
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.5 1.8 3.6
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NIST 4.9 3.9 6.9
AV:L/AC:L/Au:N/C:N/I:N/A:C
CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

http://www.securitytracker.com/id/1041432
Third Party Advisory
VDB Entry
https://www.qualcomm.com/company/product-security/bulletins
Vendor Advisory
https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components
Vendor Advisory