CVE-2017-18136

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9615…

published April 11, 2018

CVSS
—
EPSS
1%
Percentile
69.0
In the wild
Unconfirmed
What it is

⚠️ A pesky ‘Use After Free’ condition lurks in Qualcomm's Snapdragon components before April 2018, ready to throw a wrench in your device’s performance! 🔧 Think of it like a restaurant that leaves the kitchen door wide open after closing time, allowing anyone to waltz in and mess with the leftovers — not exactly safe! If an attacker were to exploit this vulnerability, they could potentially gain unexpected control over your device, leading to crashes or unauthorized access to sensitive information. While no known exploits are documented, the potential for chaos is still alarming!

Put simply

Think of it like a restaurant that leaves the kitchen door wide open after closing time, allowing anyone to waltz in and mess with the leftovers — not exactly safe! This vulnerability occurs in the OMX AAC component of various Qualcomm Snapdragon products, where memory that has already been freed can be reused improperly, leading to unpredictable behavior or crashes.

What to do

If an attacker were to exploit this vulnerability, they could potentially gain unexpected control over your device, leading to crashes or unauthorized access to sensitive information. While no known exploits are documented, the potential for chaos is still alarming! To protect yourself, make sure to update your Android devices to the security patch level of 2018-04-05 or later. Check manufacturer support documentation for any necessary firmware updates. ✨ You've got this! Stay proactive and keep your devices secure! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01252 · 69.0th percentile
Published
2018-04-11T15:00Z
EPSS history
Timeline
  • 11 APR 15:00Z
    In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9615…
    cvelistv5