VULNERABILITY INTELLIGENCE

CVE-2017-18173

CVSS score7.8 HIGH
EPSS probability0.23%
CISA KEVNot currently listed
Published2019-05-06
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

In case of using an invalid android verified boot signature with very large length, an integer underflow occurs in Snapdragon Mobile in SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 810, SD 820, SD 835, SDM630, SDM636, SDM660, Snapdragon_High_Med_2016.

Weakness classification

  • CWE-190: Integer Overflow or Wraparound

Primary references