CVE-2017-18145

CVE-2017-18145: vulnerability in Qualcomm, Inc. Snapdragon Mobile, Snapdragon…

Published · Updated

Follow this CVE+ Monitor Snapdragon Mobile+ Monitor Snapdragon Wear

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.2%
In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 835, SD 845, while the DPM native process is processing framework events, the iterator pointer is deleted after processing an event. When processing subsequent events, a Use After Condition will occur.
Affected products
Qualcomm, Inc. · Snapdragon Mobile, Snapdragon Wear
Related CVEs — Qualcomm, Inc. Snapdragon Mobile, Snapdragon…

In the same product, most dangerous first.

CVE-2015-9222—CVE-2015-9222EPSS 4.3%CVE-2016-10502—CVE-2016-10502EPSS 1.5%CVE-2015-9122—CVE-2015-9122EPSS 1.4%CVE-2016-10449—CVE-2016-10449EPSS 1.4%CVE-2016-10491—CVE-2016-10491EPSS 1.3%CVE-2015-9161—CVE-2015-9161EPSS 1.3%