Skip to content
Not rated

CVE-2017-18140 In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon…

Description

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, when processing a call disconnection, there is an attempt to print the RIL token-id to the debug log. If eMBMS service is enabled while processing the call disconnect, a Use After Free condition may potentially occur.

Affected products and versions

Product Affected versions Fixed in
Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Versions not published
The 123 CVEs of Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear →
Track this CVE