CVE-2017-18153: Use After Free in WLAN | LiveThreat CVE Feed — Verisq

Login Request a demo

High severity · published Nov 26, 2024

CVE-2017-18153

Use After Free in WLAN

7.0

CVSS

0.1%

EPSS

No

On KEV

Description

A race condition exists in a driver potentially leading to a use-after-free condition.

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack vector

Local

Complexity

High

Privileges

Low

User interaction

None

Confidentiality

High

Integrity

High

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)0.1% · higher than 1% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

SN

Snapdragon · Qualcomm, Inc.

9206 LTE Modem; APQ8017; AR6003; Snapdragon 630 Mobile Platform; Snapdragon 636 Mobile Platform · source: vendor

9L

9206 Lte Modem Firmware · Qualcomm

All versions, or not specified · source: NVD

AF

Apq8017 Firmware · Qualcomm

All versions, or not specified · source: NVD

AF

Ar6003 Firmware · Qualcomm

All versions, or not specified · source: NVD

S6

Snapdragon 630 Mobile Firmware · Qualcomm

All versions, or not specified · source: NVD

S6

Snapdragon 636 Mobile Firmware · Qualcomm

All versions, or not specified · source: NVD

Affected product

SN

Snapdragon

Qualcomm, Inc.

All Snapdragon CVEs

References

https://nvd.nist.gov/vuln/detail/CVE-2017-18153

https://www.cve.org/CVERecord?id=CVE-2017-18153

Vendor Advisory

https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2018-bulletin.html

More from Snapdragon

8.6

Incorrect Authorization in Graphics

8.6

Incorrect Authorization in Graphics Windows

7.8

Integer Overflow or Wraparound in Graphics

7.8

Use After Free in DSP Service

7.8

Integer Overflow or Wraparound in Graphics Linux