CVE-2017-18301

Severity: medium (CVSS 5.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-09-20 · updated 2026-06-17
Weakness: CWE-476

Description

In Small Cell SoC and Snapdragon (Automobile, Mobile, Wear) in version FSM9055, FSM9955, MDM9607, MDM9640, MDM9650, MSM8909W, SD 425, SD 427, SD 430, SD 435, SD 450, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SDM630, SDM636, SDM660, SDX20, Snapdragon_High_Med_2016, providing the NULL argument of ICE regulator while processing create key IOCTL results in system restart.

Affected products

Qualcomm Fsm9055 Firmware: all versions
Qualcomm Fsm9955 Firmware: all versions
Qualcomm Mdm9607 Firmware: all versions
Qualcomm Mdm9640 Firmware: all versions
Qualcomm Mdm9650 Firmware: all versions
Qualcomm Msm8909W Firmware: all versions
Qualcomm Sd425 Firmware: all versions
Qualcomm Sd427 Firmware: all versions
Qualcomm Sd430 Firmware: all versions
Qualcomm Sd435 Firmware: all versions
Qualcomm Sd450 Firmware: all versions
Qualcomm Sd617 Firmware: all versions
Qualcomm Sd625 Firmware: all versions
Qualcomm Sd650 Firmware: all versions
Qualcomm Sd652 Firmware: all versions
Qualcomm Sd820 Firmware: all versions
Qualcomm Sd820A Firmware: all versions
Qualcomm Sd835 Firmware: all versions
Qualcomm Sd845 Firmware: all versions
Qualcomm Sdm630 Firmware: all versions
Qualcomm Sdm636 Firmware: all versions
Qualcomm Sdm660 Firmware: all versions
Qualcomm Sdx20 Firmware: all versions

References

Get alerted when CVE-2017-18301 or the next vulnerability affects your stack