cve/2017/CVE-2017-18298.md

CVE-2017-18298

Description

Lack of Input Validation in SDMX API can lead to NULL pointer access in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660 .

POC

Reference

• https://www.qualcomm.com/company/product-security/bulletins

Github

• https://github.com/ARPSyndicate/cvemon