// For flags

CVE-2017-18136

 

Severity Score

9.8
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9635M, MDM9640, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 820, SD 820A, SD 835, SD 845, in the omx aac component, a Use After Free condition may potentially occur.

En Android, antes del nivel de parche de seguridad del 2018-04-05 en Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9635M, MDM9640, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 820, SD 820A, SD 835 y SD 845 podría ocurrir una condición de uso de memoria previamente liberada en el componente omx aac.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
Complete
Integrity
Complete
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2018-02-05 CVE Reserved
  • 2018-04-11 CVE Published
  • 2023-09-02 EPSS Updated
  • 2024-09-16 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-416: Use After Free
CAPEC
References (2)
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Qualcomm
Search vendor "Qualcomm"
Mdm9206 Firmware
Search vendor "Qualcomm" for product "Mdm9206 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Mdm9206
Search vendor "Qualcomm" for product "Mdm9206"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Mdm9607 Firmware
Search vendor "Qualcomm" for product "Mdm9607 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Mdm9607
Search vendor "Qualcomm" for product "Mdm9607"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Mdm9615 Firmware
Search vendor "Qualcomm" for product "Mdm9615 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Mdm9615
Search vendor "Qualcomm" for product "Mdm9615"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Mdm9635m Firmware
Search vendor "Qualcomm" for product "Mdm9635m Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Mdm9635m
Search vendor "Qualcomm" for product "Mdm9635m"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Mdm9640 Firmware
Search vendor "Qualcomm" for product "Mdm9640 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Mdm9640
Search vendor "Qualcomm" for product "Mdm9640"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Mdm9650 Firmware
Search vendor "Qualcomm" for product "Mdm9650 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Mdm9650
Search vendor "Qualcomm" for product "Mdm9650"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Msm8909w Firmware
Search vendor "Qualcomm" for product "Msm8909w Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Msm8909w
Search vendor "Qualcomm" for product "Msm8909w"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 210 Firmware
Search vendor "Qualcomm" for product "Sd 210 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 210
Search vendor "Qualcomm" for product "Sd 210"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 212 Firmware
Search vendor "Qualcomm" for product "Sd 212 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 212
Search vendor "Qualcomm" for product "Sd 212"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 205 Firmware
Search vendor "Qualcomm" for product "Sd 205 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 205
Search vendor "Qualcomm" for product "Sd 205"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 400 Firmware
Search vendor "Qualcomm" for product "Sd 400 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 400
Search vendor "Qualcomm" for product "Sd 400"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 425 Firmware
Search vendor "Qualcomm" for product "Sd 425 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 425
Search vendor "Qualcomm" for product "Sd 425"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 430 Firmware
Search vendor "Qualcomm" for product "Sd 430 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 430
Search vendor "Qualcomm" for product "Sd 430"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 450 Firmware
Search vendor "Qualcomm" for product "Sd 450 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 450
Search vendor "Qualcomm" for product "Sd 450"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 615 Firmware
Search vendor "Qualcomm" for product "Sd 615 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 615
Search vendor "Qualcomm" for product "Sd 615"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 616 Firmware
Search vendor "Qualcomm" for product "Sd 616 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 616
Search vendor "Qualcomm" for product "Sd 616"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 415 Firmware
Search vendor "Qualcomm" for product "Sd 415 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 415
Search vendor "Qualcomm" for product "Sd 415"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 617 Firmware
Search vendor "Qualcomm" for product "Sd 617 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 617
Search vendor "Qualcomm" for product "Sd 617"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 625 Firmware
Search vendor "Qualcomm" for product "Sd 625 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 625
Search vendor "Qualcomm" for product "Sd 625"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 650 Firmware
Search vendor "Qualcomm" for product "Sd 650 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 650
Search vendor "Qualcomm" for product "Sd 650"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 652 Firmware
Search vendor "Qualcomm" for product "Sd 652 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 652
Search vendor "Qualcomm" for product "Sd 652"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 820a Firmware
Search vendor "Qualcomm" for product "Sd 820a Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 820a
Search vendor "Qualcomm" for product "Sd 820a"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 808 Firmware
Search vendor "Qualcomm" for product "Sd 808 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 808
Search vendor "Qualcomm" for product "Sd 808"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 820 Firmware
Search vendor "Qualcomm" for product "Sd 820 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 820
Search vendor "Qualcomm" for product "Sd 820"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 835 Firmware
Search vendor "Qualcomm" for product "Sd 835 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 835
Search vendor "Qualcomm" for product "Sd 835"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 845 Firmware
Search vendor "Qualcomm" for product "Sd 845 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 845
Search vendor "Qualcomm" for product "Sd 845"
--
Safe