CVE-2017-18173: Qualcomm Sd 425 Firmware

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

In case of using an invalid android verified boot signature with very large length, an integer underflow occurs in Snapdragon Mobile in SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 810, SD 820, SD 835, SDM630, SDM636, SDM660, Snapdragon_High_Med_2016.

Affected products

• Qualcomm Sd 425 Firmware: affected versions not specified
• Qualcomm Sd 427 Firmware: affected versions not specified
• Qualcomm Sd 430 Firmware: affected versions not specified
• Qualcomm Sd 435 Firmware: affected versions not specified
• Qualcomm Sd 450 Firmware: affected versions not specified
• Qualcomm Sd 625 Firmware: affected versions not specified
• Qualcomm Sd 810 Firmware: affected versions not specified
• Qualcomm Sd 820 Firmware: affected versions not specified
• Qualcomm Sd 835 Firmware: affected versions not specified
• Qualcomm SDM630 Firmware: affected versions not specified
• Qualcomm SDM636 Firmware: affected versions not specified
• Qualcomm SDM660 Firmware: affected versions not specified
• Qualcomm Snapdragon High Med 2016 Firmware: affected versions not specified

Published 2019-05-06. Last modified 2026-06-17.