VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Apr 11, 2018· Updated Jun 17, 2026

CVE-2017-18127

CVE-2017-18127

Description

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 430, SD 450, SD 625, SD 650/52, SD 820, SD 835, SD 845, while processing a SetParam command packet in the VR service, the extracted name_len and value_len values are not checked and could potentially cause a buffer overflow in subsequent calls to memcpy().

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Qualcomm/Snapdragon Mobilellm-fuzzy
    Range: < 2018-04-05 security patch level
  • Qualcomm/Snapdragon Wearllm-fuzzy
    Range: < 2018-04-05 security patch level
  • Qualcomm, Inc./Snapdragon Mobile, Snapdragon Wearv5
    Range: MSM8909W, SD 210/SD 212/SD 205, SD 430, SD 450, SD 625, SD 650/52, SD 820, SD 835, SD 845

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.