CVE-2017-18301

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In Small Cell SoC and Snapdragon (Automobile, Mobile, Wear) in version FSM9055, FSM9955, MDM9607, MDM9640, MDM9650, MSM8909W, SD 425, SD 427, SD 430, SD 435, SD 450, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SDM630, SDM636, SDM660, SDX20, Snapdragon_High_Med_2016, providing the NULL argument of ICE regulator while processing create key IOCTL results in system restart.

Metrics

CVSS 3.0 5.5/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.securitytracker.com/id/1041432Third Party Advisory, VDB Entry
https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-componentsVendor Advisory
https://www.qualcomm.com/company/product-security/bulletinsVendor Advisory
http://www.securitytracker.com/id/1041432Third Party Advisory, VDB Entry
https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-componentsVendor Advisory
https://www.qualcomm.com/company/product-security/bulletinsVendor Advisory

Timeline

Published: Sep 20, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-183024.7In Snapdragon (Automobile ,Mobile) in version MSM8996AU, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 820, SD 820A, SD 835,CVE-2017-183037.8While processing the sensors registry configuration file, if inputs are not validated a buffer overflow will occur in Snapdragon Automobile,CVE-2017-183047.8Insufficient memory allocation in boot due to incorrect size being passed could result in out of bounds access in Small Cell SoC, Snapdragon CVE-2017-183057.0XBL sec mem dump system call allows complete control of EL3 by unlocking all XPUs if enable fuse is not blown in Snapdragon Mobile, Snapdrag CVE-2017-183065.5Information disclosure due to uninitialized variable.CVE-2017-183075.5Information disclosure possible while audio playback.CVE-2017-183087.8Modem segments are unlocked after authentication, leaving modem segments open to all in Snapdragon Mobile, Snapdragon Wear in version MDM960 CVE-2017-183097.1A micro-core of QMP transportation may cause a macro-core to read from or write to arbitrary memory in Snapdragon Mobile in version SD 845, CVE-2017-183107.8ClientEnv exposes services 0-32 to HLOS in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MSM8909W, MSM8996AU, SD 210/CVE-2017-183117.8XPU Master privilege escalation is possible due to improper access control of unused configuration xPU ports where unused configuration port CVE-2017-183127.8While accessing SafeSwitch services, third party can manipulate a given device and perform unauthorized operation due to lack of checking of CVE-2017-183135.3Under certain mode of operations, HLOS may be able get direct or indirect access through DXE channels to tamper with the authenticated WCNSS