CVE-2017-18072: Qualcomm MDM9206 Firmware

High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days.

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9640, MDM9650, QCA4531, QCA6174A, QCA6564, QCA6574, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9378, QCA9379, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 835, SD 845, SDM630, SDM636, SDM660, Snapdragon_High_Med_2016, the probe requests originated from user's phone contains the information elements which specifies the supported wifi features. This shall impact the user's privacy if someone sniffs the probe requests originated by this DUT. Hence, control the presence of which information elements is supported.

Affected products

  • Qualcomm MDM9206 Firmware: affected versions not specified
  • Qualcomm MDM9607 Firmware: affected versions not specified
  • Qualcomm MDM9640 Firmware: affected versions not specified
  • Qualcomm MDM9650 Firmware: affected versions not specified
  • Qualcomm QCA4531 Firmware: affected versions not specified
  • Qualcomm QCA6174A Firmware: affected versions not specified
  • Qualcomm QCA6564 Firmware: affected versions not specified
  • Qualcomm QCA6574 Firmware: affected versions not specified
  • Qualcomm QCA6574AU Firmware: affected versions not specified
  • Qualcomm QCA6584 Firmware: affected versions not specified
  • Qualcomm QCA6584AU Firmware: affected versions not specified
  • Qualcomm QCA9377 Firmware: affected versions not specified
  • Qualcomm QCA9378 Firmware: affected versions not specified
  • Qualcomm QCA9379 Firmware: affected versions not specified
  • Qualcomm Sd 205 Firmware: affected versions not specified
  • Qualcomm Sd 210 Firmware: affected versions not specified
  • Qualcomm Sd 212 Firmware: affected versions not specified
  • Qualcomm Sd 410 Firmware: affected versions not specified
  • Qualcomm Sd 412 Firmware: affected versions not specified
  • Qualcomm Sd 415 Firmware: affected versions not specified
  • Qualcomm Sd 425 Firmware: affected versions not specified
  • Qualcomm Sd 427 Firmware: affected versions not specified
  • Qualcomm Sd 430 Firmware: affected versions not specified
  • Qualcomm Sd 435 Firmware: affected versions not specified
  • Qualcomm Sd 450 Firmware: affected versions not specified
  • and 13 more

Published 2018-04-11. Last modified 2026-06-17.