CVE-2017-18298 - Lack of Input Validation in SDMX API can lead to NULL pointer access in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660

Back Back to CVE browser

HIGH

Lack of Input Validation in SDMX API can lead to NULL pointer access in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660

Published Oct 23, 2018

7.8

HIGH

CVSS 3.0

EPSS 0.26%

Description

Lack of Input Validation in SDMX API can lead to NULL pointer access in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660 .

Affected products

Vendor Qualcomm, Inc. Product Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Default
n/a
- Version
  MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Qualcomm, Inc.

Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear

n/a

Version	Status	Constraints
MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-476

NULL Pointer Dereference

References (3)

http://www.securitytracker.com/id/1041432
vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components
x_refsource_CONFIRMThird Party Advisory
https://www.qualcomm.com/company/product-security/bulletins
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
http://www.securitytracker.com/id/1041432		vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components		x_refsource_CONFIRMThird Party Advisory
https://www.qualcomm.com/company/product-security/bulletins		x_refsource_CONFIRMVendor Advisory