CVE-2017-18294

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

While reading file class type from ELF header, a buffer overread may happen if the ELF file size is less than the size of ELF64 header size in Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version FSM9055, MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SDA660, SDX20.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-125

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear	FSM9055, MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SDA660, SDX20

References

http://www.securitytracker.com/id/1041432Third Party Advisory, VDB Entry
https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-componentsThird Party Advisory
https://www.qualcomm.com/company/product-security/bulletinsVendor Advisory
http://www.securitytracker.com/id/1041432Third Party Advisory, VDB Entry
https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-componentsThird Party Advisory
https://www.qualcomm.com/company/product-security/bulletinsVendor Advisory

Timeline

Published: Oct 23, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-182957.8Possible buffer overflow if input is not null terminated in DSP Service module in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear CVE-2017-182967.8Access control on applications is not applied while accessing SafeSwitch services can lead to improper access in Snapdragon Automobile, Snap CVE-2017-182977.8Double memory free while closing TEE SE API Session management in Snapdragon Mobile in version SD 425, SD 430, SD 450, SD 625, SD 650/52, SD CVE-2017-182987.8Lack of Input Validation in SDMX API can lead to NULL pointer access in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in vers CVE-2017-182995.5Improper translation table consolidation logic leads to resource exhaustion and QSEE error in Snapdragon Automobile, Snapdragon Mobile and S CVE-2017-183005.5Secure display content could be accessed by third party trusted application after creating a fault in other trusted applications in Snapdrag CVE-2017-183015.5In Small Cell SoC and Snapdragon (Automobile, Mobile, Wear) in version FSM9055, FSM9955, MDM9607, MDM9640, MDM9650, MSM8909W, SD 425, SD 427 CVE-2017-183024.7In Snapdragon (Automobile ,Mobile) in version MSM8996AU, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 820, SD 820A, SD 835,CVE-2017-183037.8While processing the sensors registry configuration file, if inputs are not validated a buffer overflow will occur in Snapdragon Automobile,CVE-2017-183047.8Insufficient memory allocation in boot due to incorrect size being passed could result in out of bounds access in Small Cell SoC, Snapdragon CVE-2017-183057.0XBL sec mem dump system call allows complete control of EL3 by unlocking all XPUs if enable fuse is not blown in Snapdragon Mobile, Snapdrag CVE-2017-183065.5Information disclosure due to uninitialized variable.