CVE-2017-18299

5.5 mediumEPSS 0.3%

Medium (5.5) in qualcomm. EPSS 0.3% chance of exploitation in the next 30 days.

Improper translation table consolidation logic leads to resource exhaustion and QSEE error in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in version MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660

Severity

CVSS 3.0

5.5 medium

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 16% of CVEs (scores of 2026-10-31)
CWE: CWE-400
Published: 2018-10-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

qualcomm:mdm9206_firmware
qualcomm:mdm9607_firmware
qualcomm:mdm9650_firmware
qualcomm:msm8996au_firmware
qualcomm:sd_205_firmware
qualcomm:sd_210_firmware
qualcomm:sd_212_firmware
qualcomm:sd_425_firmware
qualcomm:sd_430_firmware
qualcomm:sd_450_firmware
qualcomm:sd_625_firmware
qualcomm:sd_650_firmware
qualcomm:sd_652_firmware
qualcomm:sd_820_firmware
qualcomm:sd_820a_firmware
qualcomm:sd_835_firmware
qualcomm:sd_845_firmware
qualcomm:sd_850_firmware
qualcomm:sda660_firmware

References

Check your stack JSON