VULNERABILITY INTELLIGENCE
CVE-2017-18155
CVSS score7.8 HIGH
EPSS probability0.23%
CISA KEVNot currently listed
Published2018-07-12
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
While playing HEVC content using HD DMB in Snapdragon Automobile and Snapdragon Mobile in version MSM8996AU, SD 450, SD 625, SD 820, SD 820A, SD 835, an uninitialized variable can be used leading to a kernel fault.
Weakness classification
- CWE-20: Improper Input Validation
Primary references
- product-security@qualcomm.com — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory