CVE-2017-18279
Lack of check of buffer length before copying can lead to buffer overflow in camera module in Small Cell SoC, Snapdragon Mobile,…
- 7.8HighCVSS base score
- 0.22%Exploitation in 30 daysEPSS · top 87% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
Lack of check of buffer length before copying can lead to buffer overflow in camera module in Small Cell SoC, Snapdragon Mobile, Snapdragon Wear in FSM9055, FSM9955, IPQ4019, IPQ8064, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCA9531, QCA9558, QCA9563, QCA9880, QCA9886, QCA9980, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 800, SD 810, SD 820, SD 835, SDM630, SDM636, SDM660, SDX20, Snapdragon_High_Med_2016.
Timeline
ID reserved
By qualcomm
- 12 months later
· 12 months later
Published
- 5 years later
· 5 years later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Modified | 3.1 | High7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
- EPSS (exploitation in 30 days)
- 0.22% · top 87% of all CVEs (10 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.8.
Affected products
Qualcomm Technologies, Inc. · Small Cell SoC, Snapdragon Mobile, Snapdragon Wear
- affected FSM9055
- affected FSM9955
- affected IPQ4019
- affected IPQ8064
- affected MDM9206
- affected MDM9607
- affected MDM9640
- affected MDM9650
- affected MSM8909W
- affected MSM8996AU
- affected QCA9531
- affected QCA9558
- affected QCA9563
- affected QCA9880
- affected QCA9886
- affected QCA9980
- affected SD 210/SD 212/SD 205
- affected SD 425
- affected SD 427
- affected SD 430
- affected SD 435
- affected SD 450
- affected SD 615/16/SD 415
- affected SD 625
- affected SD 650/52
- affected SD 800
- affected SD 810
- affected SD 820
- affected SD 835
- affected SDM630
- affected SDM636
- affected SDM660
- affected SDX20
- affected Snapdragon_High_Med_2016
References
1
- https://www.qualcomm.com/company/product-security/bulletins (opens in a new tab)x_refsource_MISCx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2017-9406 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2017-18279)Record last updated .