CVE-2017-18304

7.8 highEPSS 0.3%

High (7.8). EPSS 0.3% chance of exploitation in the next 30 days.

Insufficient memory allocation in boot due to incorrect size being passed could result in out of bounds access in Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in version FSM9055, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SDA660 and SDX20

Severity

CVSS 3.0

7.8 high

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 17% of CVEs (scores of 2026-10-31)
CWE: CWE-125
Published: 2018-10-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

qaulcomm:fsm9055_firmware
qualcomm:mdm9206_firmware
qualcomm:mdm9607_firmware
qualcomm:mdm9640_firmware
qualcomm:mdm9650_firmware
qualcomm:msm8909w_firmware
qualcomm:msm8996au_firmware
qualcomm:sd_205_firmware
qualcomm:sd_210_firmware
qualcomm:sd_212_firmware
qualcomm:sd_415_firmware
qualcomm:sd_425_firmware
qualcomm:sd_430_firmware
qualcomm:sd_450_firmware
qualcomm:sd_615_firmware
qualcomm:sd_616_firmware
qualcomm:sd_617_firmware
qualcomm:sd_625_firmware
qualcomm:sd_650_firmware
qualcomm:sd_652_firmware
qualcomm:sd_810_firmware
qualcomm:sd_820_firmware
qualcomm:sd_820a_firmware
qualcomm:sd_835_firmware
qualcomm:sda660_firmware
qualcomm:sdx20_firmware

References

Check your stack JSON