CVE-2017-18144

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 450, SD 615/16/SD 415…

published April 11, 2018

CVSS
—
EPSS
1%
Percentile
67.6
In the wild
Unconfirmed
What it is

⚠️ A make-after-break scenario is a recipe for disaster! In Android devices using certain Qualcomm Snapdragon chips, a mismanaged connection can lead to a Use After Free vulnerability. 🔥 Think of it like a restaurant where a waiter forgets to clear the table after a customer leaves. When a new customer sits down, they can accidentally access the leftovers from the previous diner, leading to a rather unsavory experience! In this case, if the connection to the WPA supplicant fails, it could allow an attacker to exploit this vulnerability, potentially gaining access to sensitive data or executing harmful code. Imagine the chaos that could ensue if someone found a way to hijack your connection while you're on a public Wi-Fi network!

Put simply

Think of it like a restaurant where a waiter forgets to clear the table after a customer leaves. When a new customer sits down, they can accidentally access the leftovers from the previous diner, leading to a rather unsavory experience! This vulnerability arises due to a failure to correctly update the local pointer after a command transmission failure in the WPA supplicant. This can cause a Use After Free condition, potentially leading to unauthorized access or control.

What to do

In this case, if the connection to the WPA supplicant fails, it could allow an attacker to exploit this vulnerability, potentially gaining access to sensitive data or executing harmful code. Imagine the chaos that could ensue if someone found a way to hijack your connection while you're on a public Wi-Fi network! To protect your device, update to the latest Android security patch level (post-2018-04-05) as Qualcomm has addressed this issue. Regularly check for updates and apply them promptly to ensure your device remains secure. You've got this! Keeping your devices updated is the key to staying safe. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01185 · 67.6th percentile
Published
2018-04-11T15:00Z
EPSS history
Timeline
  • 11 APR 15:00Z
    In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 450, SD 615/16/SD 415…
    cvelistv5