CVE-2017-18294

7.8 highEPSS 0.3%

High (7.8) in qualcomm. EPSS 0.3% chance of exploitation in the next 30 days.

While reading file class type from ELF header, a buffer overread may happen if the ELF file size is less than the size of ELF64 header size in Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version FSM9055, MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SDA660, SDX20.

Severity

CVSS 3.0

7.8 high

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 17% of CVEs (scores of 2026-10-31)
CWE: CWE-125
Published: 2018-10-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

qualcomm:fsm9055_firmware
qualcomm:mdm9206_firmware
qualcomm:mdm9607_firmware
qualcomm:mdm9650_firmware
qualcomm:msm8909w_firmware
qualcomm:msm8996au_firmware
qualcomm:sd_205_firmware
qualcomm:sd_210_firmware
qualcomm:sd_212_firmware
qualcomm:sd_415_firmware
qualcomm:sd_425_firmware
qualcomm:sd_430_firmware
qualcomm:sd_450_firmware
qualcomm:sd_615_firmware
qualcomm:sd_616_firmware
qualcomm:sd_625_firmware
qualcomm:sd_650_firmware
qualcomm:sd_652_firmware
qualcomm:sd_820_firmware
qualcomm:sd_820a_firmware
qualcomm:sd_835_firmware
qualcomm:sd_845_firmware
qualcomm:sda660_firmware
qualcomm:sdx20_firmware

References

Check your stack JSON