What is CVE-2017-18172?

CVE-2017-18172 is a high-severity vulnerability in Qualcomm Mdm9635m, classified under Integer Overflow or Wraparound. CVSS score: 7.8/10. Published 2018-10-23.

How severe is CVE-2017-18172?

High severity. CVSS v3 base score is 7.8 out of 10.

Is CVE-2017-18172 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Integer overflow in Qualcomm Mdm9635m

CVE-2017-18172

In a device, with screen size 1440x2560, the check of contiguous buffer will overflow on certain buffer size resulting in an Integer Overflow or Wraparound in System UI in Snapdragon Automobile, Snapdragon Mobile in version MDM9635M, SD 400, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 810, SD 820, SD 820A, SD 835, SDM630, SDM636, SDM660, Snapdragon_High_Med_2016.

Vulnerability class: Integer Overflow

EPSS: 0.002 (11.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Weakness classification (CWE)

CWE-190 — Integer Overflow or Wraparound

Public proof-of-concept exploits

ARPSyndicate/cvemon

References

product-security@qualcomm.com (x_refsource_CONFIRM, Vendor Advisory)
product-security@qualcomm.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2017-18172?: CVE-2017-18172 is a high-severity vulnerability in Qualcomm Mdm9635m, classified under Integer Overflow or Wraparound. CVSS score: 7.8/10. Published 2018-10-23.
How severe is CVE-2017-18172?: High severity. CVSS v3 base score is 7.8 out of 10.
Is CVE-2017-18172 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.