Lack of check of buffer length before copying can lead to buffer overflow in camera module in Small Cell SoC, Snapdragon Mobile,…

Description

Lack of check of buffer length before copying can lead to buffer overflow in camera module in Small Cell SoC, Snapdragon Mobile, Snapdragon Wear in FSM9055, FSM9955, IPQ4019, IPQ8064, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCA9531, QCA9558, QCA9563, QCA9880, QCA9886, QCA9980, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 800, SD 810, SD 820, SD 835, SDM630, SDM636, SDM660, SDX20, Snapdragon_High_Med_2016.

Scores

EPSS (exploitation in 30 days)

0.22% · top 87% of all CVEs (5 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.8.

Weakness

• CWE680: Integer Overflow to Buffer Overflow
• CWE-190 (opens in a new tab)All about CWE-190 and its CVEs

Affected products

• Qualcomm Technologies, Inc. · Small Cell SoC, Snapdragon Mobile, Snapdragon Wear

  • affected FSM9055
  • affected FSM9955
  • affected IPQ4019
  • affected IPQ8064
  • affected MDM9206
  • affected MDM9607
  • affected MDM9640
  • affected MDM9650
  • affected MSM8909W
  • affected MSM8996AU
  • affected QCA9531
  • affected QCA9558
  • affected QCA9563
  • affected QCA9880
  • affected QCA9886
  • affected QCA9980
  • affected SD 210/SD 212/SD 205
  • affected SD 425
  • affected SD 427
  • affected SD 430
  • affected SD 435
  • affected SD 450
  • affected SD 615/16/SD 415
  • affected SD 625
  • affected SD 650/52
  • affected SD 800
  • affected SD 810
  • affected SD 820
  • affected SD 835
  • affected SDM630
  • affected SDM636
  • affected SDM660
  • affected SDX20
  • affected Snapdragon_High_Med_2016

References (1)

• https://www.qualcomm.com/company/product-security/bulletins (opens in a new tab)x_refsource_MISCx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2017-18279](https://trackcve.app/badge/CVE-2017-18279.svg)](https://trackcve.app/cve/CVE-2017-18279)

Record last updated 5 Aug 2024, 21:13 UTC.