CVE-2017-18301: Qualcomm FSM9055 Firmware

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

In Small Cell SoC and Snapdragon (Automobile, Mobile, Wear) in version FSM9055, FSM9955, MDM9607, MDM9640, MDM9650, MSM8909W, SD 425, SD 427, SD 430, SD 435, SD 450, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SDM630, SDM636, SDM660, SDX20, Snapdragon_High_Med_2016, providing the NULL argument of ICE regulator while processing create key IOCTL results in system restart.

Affected products

• Qualcomm FSM9055 Firmware: affected versions not specified
• Qualcomm FSM9955 Firmware: affected versions not specified
• Qualcomm MDM9607 Firmware: affected versions not specified
• Qualcomm MDM9640 Firmware: affected versions not specified
• Qualcomm MDM9650 Firmware: affected versions not specified
• Qualcomm MSM8909W Firmware: affected versions not specified
• Qualcomm SD425 Firmware: affected versions not specified
• Qualcomm SD427 Firmware: affected versions not specified
• Qualcomm SD430 Firmware: affected versions not specified
• Qualcomm SD435 Firmware: affected versions not specified
• Qualcomm SD450 Firmware: affected versions not specified
• Qualcomm SD617 Firmware: affected versions not specified
• Qualcomm SD625 Firmware: affected versions not specified
• Qualcomm SD650 Firmware: affected versions not specified
• Qualcomm SD652 Firmware: affected versions not specified
• Qualcomm SD820 Firmware: affected versions not specified
• Qualcomm SD820A Firmware: affected versions not specified
• Qualcomm SD835 Firmware: affected versions not specified
• Qualcomm SD845 Firmware: affected versions not specified
• Qualcomm SDM630 Firmware: affected versions not specified
• Qualcomm SDM636 Firmware: affected versions not specified
• Qualcomm SDM660 Firmware: affected versions not specified
• Qualcomm SDX20 Firmware: affected versions not specified

Published 2018-09-20. Last modified 2026-06-17.