CVE-2017-18145

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 450, SD 615/16/SD 415โ€ฆ

published April 11, 2018

CVSS
โ€”
EPSS
1%
Percentile
67.4
In the wild
Unconfirmed
What it is

๐Ÿšจ A sneaky use-after-condition in Android's DPM native process could unexpectedly lead to crashes! Think of it like a coffee shop that accidentally throws away the coffee cup just after pouring your drink โ€” the barista can't complete your order and chaos ensues! If exploited, this issue might result in unexpected behavior or even app crashes on affected devices, leaving users frustrated and unable to access their devices properly. Imagine trying to make a call and your phone just freezes โ€” absolutely devastating!

Put simply

Think of it like a coffee shop that accidentally throws away the coffee cup just after pouring your drink โ€” the barista can't complete your order and chaos ensues! This vulnerability occurs when the iterator pointer is deleted after processing an event in the DPM native process, causing a use-after-condition during subsequent event processing.

What to do

If exploited, this issue might result in unexpected behavior or even app crashes on affected devices, leaving users frustrated and unable to access their devices properly. Imagine trying to make a call and your phone just freezes โ€” absolutely devastating! Update your devices to the latest Android security patch level after 2018-04-05 to eliminate this vulnerability. Keep an eye on Qualcomm's updates for any patches related to affected Snapdragon models! You've got this! With a few simple updates, you can keep your devices safe and sound! ๐Ÿ›ก๏ธ

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01185 ยท 67.4th percentile
Published
2018-04-11T15:00Z
EPSS history
Timeline
  • 11 APR 15:00Z
    In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 450, SD 615/16/SD 415โ€ฆ
    cvelistv5