CVE-2017-18139

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650…

published April 11, 2018

CVSS
—
EPSS
1%
Percentile
69.8
In the wild
Unconfirmed
What it is

⚠️ A buffer overflow vulnerability lurking in Android’s IMS call process could catch you off guard! 📞 Think of it like trying to fit a big package into a mailbox that’s just too small. When the excess data spills over, it can lead to chaos — much like what happens in your device when it can’t properly handle an IMS call! Should this exploit be targeted, it could lead to unpredictable behavior during phone calls, potentially allowing attackers to manipulate your device in unintended ways. While there's no known active exploitation, the chaos it could unleash makes it a worthy concern!

Put simply

Think of it like trying to fit a big package into a mailbox that’s just too small. When the excess data spills over, it can lead to chaos — much like what happens in your device when it can’t properly handle an IMS call! This vulnerability resides in the handling of IMS calls in various Qualcomm Snapdragon mobile devices prior to the April 2018 security patch. A buffer overflow may occur, allowing excess data to overwrite adjacent memory, which can lead to unpredictable behavior or crashes.

What to do

Should this exploit be targeted, it could lead to unpredictable behavior during phone calls, potentially allowing attackers to manipulate your device in unintended ways. While there's no known active exploitation, the chaos it could unleash makes it a worthy concern! To safeguard your devices, ensure they are updated to the April 2018 security patch level or later. Check your device settings regularly for updates and consider manual checks if automatic updates are disabled. You've got this! Keep your device updated and secure, and you'll be a hero in the fight against vulnerabilities! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01281 · 69.8th percentile
Published
2018-04-11T15:00Z
EPSS history
Timeline
  • 11 APR 15:00Z
    In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650…
    cvelistv5