CVE-2017-18142

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile MDM9650, MDM9655, SD 835, SD 845, SD 850, while processing the IMS SIP…

published April 11, 2018

CVSS
—
EPSS
1%
Percentile
69.8
In the wild
Unconfirmed
What it is

⚠️ A sneaky buffer overflow could be hiding in your Android device! Several Qualcomm Snapdragon chips are affected by this quirk when processing IMS SIP usernames. 🔍 Think of it like a restaurant that overfills a delivery box to the point that it spills all over the place — when the input is more than a system can handle, chaos can ensue! If exploited, this buffer overflow could allow an attacker to manipulate the device's memory, leading to potential data breaches or crashes — absolutely devastating for the user experience! Imagine your device freezing just when you need it most.

Put simply

Think of it like a restaurant that overfills a delivery box to the point that it spills all over the place — when the input is more than a system can handle, chaos can ensue! This vulnerability occurs in Qualcomm's Snapdragon chips, where processing an excessively long IMS SIP username can cause a buffer overflow, leading to unintended consequences within the device's operation.

What to do

If exploited, this buffer overflow could allow an attacker to manipulate the device's memory, leading to potential data breaches or crashes — absolutely devastating for the user experience! Imagine your device freezing just when you need it most. To mitigate this, ensure your Android device is updated to a security patch level of 2018-04-05 or later. Regularly check for system updates to keep your firmware secure! You've got this! Stay vigilant and keep those devices updated for maximum security! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01281 · 69.8th percentile
Published
2018-04-11T15:00Z
EPSS history
Timeline
  • 11 APR 15:00Z
    In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile MDM9650, MDM9655, SD 835, SD 845, SD 850, while processing the IMS SIP…
    cvelistv5