{"id":"CVE-2017-18301","url":"https://www.cyber-defence.io/tools/cve/CVE-2017-18301","generatedAt":"2026-10-29T00:41:21.378Z","title":"In Small Cell SoC and Snapdragon (Automobile, Mobile, Wear) in version FSM9055, FSM9955, MDM9607, MDM9640, MDM9650, MSM8909W, SD 425, SD 427, SD 430, SD 435, SD 450, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SDM630, SDM636, SDM660,…","description":"In Small Cell SoC and Snapdragon (Automobile, Mobile, Wear) in version FSM9055, FSM9955, MDM9607, MDM9640, MDM9650, MSM8909W, SD 425, SD 427, SD 430, SD 435, SD 450, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SDM630, SDM636, SDM660, SDX20, Snapdragon_High_Med_2016, providing the NULL argument of ICE regulator while processing create key IOCTL results in system restart.","published":"2018-09-20T13:29:00.000Z","lastModified":"2026-06-17T01:12:35.000Z","status":"Modified","sourceIdentifier":"product-security@qualcomm.com","cvss":{"version":"3.0","score":5.5,"severity":"MEDIUM","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"},"cwe":["CWE-476"],"affected":["qualcomm/fsm9055 firmware","qualcomm/fsm9955 firmware","qualcomm/mdm9607 firmware","qualcomm/mdm9640 firmware","qualcomm/mdm9650 firmware","qualcomm/msm8909w firmware","qualcomm/sd425 firmware","qualcomm/sd427 firmware","qualcomm/sd430 firmware","qualcomm/sd435 firmware","qualcomm/sd450 firmware","qualcomm/sd617 firmware","qualcomm/sd625 firmware","qualcomm/sd650 firmware","qualcomm/sd652 firmware","qualcomm/sd820 firmware","qualcomm/sd820a firmware","qualcomm/sd835 firmware","qualcomm/sd845 firmware","qualcomm/sdm630 firmware","qualcomm/sdm636 firmware","qualcomm/sdm660 firmware","qualcomm/sdx20 firmware"],"epss":{"score":0.00238,"percentile":0.14775,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.24%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"http://www.securitytracker.com/id/1041432","tags":["Third Party Advisory","VDB Entry"],"source":"product-security@qualcomm.com"},{"url":"https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components","tags":["Vendor Advisory"],"source":"product-security@qualcomm.com"},{"url":"https://www.qualcomm.com/company/product-security/bulletins","tags":["Vendor Advisory"],"source":"product-security@qualcomm.com"},{"url":"http://www.securitytracker.com/id/1041432","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.qualcomm.com/company/product-security/bulletins","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2017-18301","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}