Vulnerability

CVE-2017-18171

Component: BLUETOOTH
Improper input validation for GATT data packet received in Bluetooth Controller function can lead to possible memory corruption in Snapdragon Mobile in version QCA9379, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 835, SD 845, SD 850, SDM630, SDM636, SDM660, SDM710, Snapdragon_High_Med_2016.

Impact

Severity (Manufact.)

N/A

Severity (NIST)

8.8

Severity (Android)

N/A

Chipsets

21

Devices

910

Affected Hardware

NameAlso known asManufacturer
MSM8909
Snapdragon 210
Qualcomm
MSM8909AA
Snapdragon 212
Qualcomm
MSM8916
Snapdragon 410
Qualcomm
MSM8929
Snapdragon 415
Qualcomm
MSM8917
Snapdragon 425
Qualcomm
MSM8920
Snapdragon 427
Qualcomm
MSM8937
Snapdragon 430
Qualcomm
MSM8940
Snapdragon 435
Qualcomm
SDM450
Snapdragon 450
Qualcomm
MSM8939
Snapdragon 615
Qualcomm
21 of 21 row(s) shown.

Rows per page

Page 1 of 3

Timeline

Introduced (est):
Jan 1, 2014
Reported:
Unknown
Advisory Published:
Oct 1, 2018
CVE Published:
Oct 23, 2018
Android Patch Level:
Jul 2018
For more information and a detailed analysis of the data presented on this website, please see our paper, to be presented at NDSS'25.
Follow us on Twitter