CVE-2017-14913

In Android before 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile MDM9206, SD 625, SD 650/52, SD 835, SD 845, DDR address input validation is being…

published March 30, 2018

CVSS
—
EPSS
2%
Percentile
76.6
In the wild
Unconfirmed
What it is

⚠️ A sneaky input validation issue in Qualcomm's Snapdragon chips could be up to no good! It affects devices from 2017 and before, so let's not let our guard down! Think of it like a delivery service that misreads address labels due to truncated information — sometimes the package goes to the wrong place! This flaw in DDR address input validation could lead to unexpected behavior in your device. If exploited, an attacker could potentially manipulate memory operations, causing instability or unpredictable behavior in affected devices. While it's not a guaranteed breach, the risk of bugs or system crashes could lead to frustrating user experiences or even worse.

Put simply

Think of it like a delivery service that misreads address labels due to truncated information — sometimes the package goes to the wrong place! This flaw in DDR address input validation could lead to unexpected behavior in your device. This vulnerability arises from improperly truncated DDR address inputs, meaning that the system may not validate them correctly, leading to potential memory access issues.

What to do

If exploited, an attacker could potentially manipulate memory operations, causing instability or unpredictable behavior in affected devices. While it's not a guaranteed breach, the risk of bugs or system crashes could lead to frustrating user experiences or even worse. Make sure you update your affected Qualcomm devices with the latest security patches available after January 5, 2018. Regularly check for firmware updates, and consider reviewing device usage policies. You've got this! Stay vigilant and keep those devices updated! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01671 · 76.6th percentile
Published
2018-03-30T15:00Z
EPSS history
Timeline
  • 30 MAR 15:00Z
    In Android before 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile MDM9206, SD 625, SD 650/52, SD 835, SD 845, DDR address input validation is being…
    cvelistv5