CVE-2017-18135: Qualcomm MDM9650 Firmware

Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days.

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile MDM9650, MDM9655, SD 450, SD 625, SD 650/52, SD 835, SD 845, SD 850, in the Wireless Data Service (WDS) module, a buffer overflow can occur.

Affected products

  • Qualcomm MDM9650 Firmware: affected versions not specified
  • Qualcomm MDM9655 Firmware: affected versions not specified
  • Qualcomm Sd 450 Firmware: affected versions not specified
  • Qualcomm Sd 625 Firmware: affected versions not specified
  • Qualcomm Sd 650 Firmware: affected versions not specified
  • Qualcomm Sd 652 Firmware: affected versions not specified
  • Qualcomm Sd 835 Firmware: affected versions not specified
  • Qualcomm Sd 845 Firmware: affected versions not specified
  • Qualcomm Sd 850 Firmware: affected versions not specified

Published 2018-04-11. Last modified 2026-06-17.