CVE-2017-18155: Qualcomm MSM8996AU Firmware

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

While playing HEVC content using HD DMB in Snapdragon Automobile and Snapdragon Mobile in version MSM8996AU, SD 450, SD 625, SD 820, SD 820A, SD 835, an uninitialized variable can be used leading to a kernel fault.

Affected products

• Qualcomm MSM8996AU Firmware: affected versions not specified
• Qualcomm Sd 450 Firmware: affected versions not specified
• Qualcomm Sd 625 Firmware: affected versions not specified
• Qualcomm Sd 820 Firmware: affected versions not specified
• Qualcomm Sd 820a Firmware: affected versions not specified
• Qualcomm Sd 835 Firmware: affected versions not specified

Published 2018-07-12. Last modified 2026-06-17.