CVE-2017-18296

7.8 highEPSS 0.3%

Access control on applications is not applied while accessing SafeSwitch services can lead to improper access in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SDA660, SDX20.

Severity

CVSS 3.0

7.8 high

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 17% of CVEs (scores of 2026-10-31)
Published: 2018-10-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

qualcomm:mdm9206_firmware
qualcomm:mdm9607_firmware
qualcomm:mdm9650_firmware
qualcomm:msm8909w_firmware
qualcomm:msm8996au_firmware
qualcomm:sd_205_firmware
qualcomm:sd_210_firmware
qualcomm:sd_212_firmware
qualcomm:sd_415_firmware
qualcomm:sd_425_firmware
qualcomm:sd_430_firmware
qualcomm:sd_450_firmware
qualcomm:sd_615_firmware
qualcomm:sd_616_firmware
qualcomm:sd_617_firmware
qualcomm:sd_625_firmware
qualcomm:sd_650_firmware
qualcomm:sd_652_firmware
qualcomm:sd_820_firmware
qualcomm:sd_820a_firmware
qualcomm:sd_835_firmware
qualcomm:sd_845_firmware
qualcomm:sda660_firmware
qualcomm:sdx20_firmware

References

Check your stack JSON