CVE-2017-18133

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 835, an…

published April 11, 2018

CVSS
—
EPSS
1%
Percentile
67.4
In the wild
Unconfirmed
What it is

⚠️ A sneaky out-of-bounds access could be lurking in your Snapdragon devices! This potential vulnerability affects Android versions prior to the April 2018 security patch. 🔍 Think of it like a delivery service misplacing a package because they don’t check the address properly — data meant for one spot can end up in the wrong hands simply due to a mix-up. This vulnerability may allow an attacker to access data beyond the intended limits, potentially leading to exposure of sensitive information or device malfunctions. While it’s not currently known to be exploited, the risk is there, and you certainly don’t want to be caught off guard!

Put simply

Think of it like a delivery service misplacing a package because they don’t check the address properly — data meant for one spot can end up in the wrong hands simply due to a mix-up. CVE-2017-18133 stems from an out-of-bounds access in the ebi channel array within Qualcomm Snapdragon devices, posing a risk when certain conditions are met. This flaw could result in unintended behavior or data leakage if left unaddressed.

What to do

This vulnerability may allow an attacker to access data beyond the intended limits, potentially leading to exposure of sensitive information or device malfunctions. While it’s not currently known to be exploited, the risk is there, and you certainly don’t want to be caught off guard! To mitigate this vulnerability, ensure your devices are updated to the latest security patch level post-2018-04-05. Regularly check for firmware updates from your device manufacturer to keep your Snapdragon devices secure. You've got this! Stay proactive and keep your devices safe with these updates! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01185 · 67.4th percentile
Published
2018-04-11T15:00Z
EPSS history
Timeline
  • 11 APR 15:00Z
    In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 835, an…
    cvelistv5