CVE-2017-18318

—

CVSS 3.0

9.8 critical

EPSS

1%p68

Published

Nov 28, 2018 (Nov 28, 2018)

Modified

Jun 17, 2026

Description

Missing validation check on CRL issuer name in Snapdragon Automobile, Snapdragon Mobile in versions MSM8996AU, SD 410/12, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 810, SD 820, SD 820A.

Vendors: qualcomm
Products: msm8996au firmware, sd 410 firmware, sd 412 firmware, sd 425 firmware, sd 430 firmware, sd 450 firmware, sd 625 firmware, sd 650 firmware, sd 652 firmware, sd 810 firmware, sd 820 firmware, sd 820a firmware
Weakness: CWE-20
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.3%)

In the news0 stories

No ingested article mentions this CVE yet.