CVE-2017-18328

EPSS 0.22%
Veröffentlicht 03.01.2019 15:29:01
Zuletzt bearbeitet 21.11.2024 03:19:52
Erkennungen
Login

Use after free in QSH client rule processing in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 820, SD 835, SDA660, SDM630, SDM660, Snapdragon_High_Med_2016.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 5

NVD 24 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Qualcomm ≫ Mdm9206 Firmware Version -

Qualcomm ≫ Mdm9206 Version -

Qualcomm ≫ Mdm9607 Firmware Version -

Qualcomm ≫ Mdm9607 Version -

Qualcomm ≫ Mdm9635m Firmware Version -

Qualcomm ≫ Mdm9635m Version -

Qualcomm ≫ Mdm9640 Firmware Version -

Qualcomm ≫ Mdm9640 Version -

Qualcomm ≫ Mdm9645 Firmware Version -

Qualcomm ≫ Mdm9645 Version -

Qualcomm ≫ Mdm9650 Firmware Version -

Qualcomm ≫ Mdm9650 Version -

Qualcomm ≫ Mdm9655 Firmware Version -

Qualcomm ≫ Mdm9655 Version -

Qualcomm ≫ Msm8909w Firmware Version -

Qualcomm ≫ Msm8909w Version -

Qualcomm ≫ Sd 210 Firmware Version -

Qualcomm ≫ Sd 210 Version -

Qualcomm ≫ Sd 212 Firmware Version -

Qualcomm ≫ Sd 212 Version -

Qualcomm ≫ Sd 205 Firmware Version -

Qualcomm ≫ Sd 205 Version -

Qualcomm ≫ Sd 425 Firmware Version -

Qualcomm ≫ Sd 425 Version -

Qualcomm ≫ Sd 427 Firmware Version -

Qualcomm ≫ Sd 427 Version -

Qualcomm ≫ Sd 430 Firmware Version -

Qualcomm ≫ Sd 430 Version -

Qualcomm ≫ Sd 435 Firmware Version -

Qualcomm ≫ Sd 435 Version -

Qualcomm ≫ Sd 450 Firmware Version -

Qualcomm ≫ Sd 450 Version -

Qualcomm ≫ Sd 625 Firmware Version -

Qualcomm ≫ Sd 625 Version -

Qualcomm ≫ Sd 636 Firmware Version -

Qualcomm ≫ Sd 636 Version -

Qualcomm ≫ Sd 820 Firmware Version -

Qualcomm ≫ Sd 820 Version -

Qualcomm ≫ Sd 835 Firmware Version -

Qualcomm ≫ Sd 835 Version -

Qualcomm ≫ Sda660 Firmware Version -

Qualcomm ≫ Sda660 Version -

Qualcomm ≫ Sdm630 Firmware Version -

Qualcomm ≫ Sdm630 Version -

Qualcomm ≫ Sdm660 Firmware Version -

Qualcomm ≫ Sdm660 Version -

Qualcomm ≫ Snapdragon High Med 2016 Firmware Version -

Qualcomm ≫ Snapdragon High Med 2016 Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.22%	0.127

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.8	1.8	5.9	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C

CWE-416 Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

http://www.securityfocus.com/bid/106128

Third Party Advisory

VDB Entry

https://www.qualcomm.com/company/product-security/bulletins

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2017-18328

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2017-18328

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2017-18328

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2017-18328