{"id":"CVE-2017-18173","state":"PUBLISHED","title":"In case of using an invalid android verified boot signature with very large length, an integer underflow occurs in Snapdragon Mobile in SD 425, SD 427, SD 430, SD 435, SD 450, SD 6","description":"In case of using an invalid android verified boot signature with very large length, an integer underflow occurs in Snapdragon Mobile in SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 810, SD 820, SD 835, SDM630, SDM636, SDM660, Snapdragon_High_Med_2016.","publishedAt":"2019-05-06T22:34:44.000Z","updatedAt":"2024-08-05T21:13:48.916Z","severity":null,"assigner":"qualcomm","products":["Qualcomm Technologies, Inc. Snapdragon Mobile"],"affected":[{"vendor":"Qualcomm Technologies, Inc.","product":"Snapdragon Mobile","versions":[{"version":"SD 425","status":"affected"},{"version":"SD 427","status":"affected"},{"version":"SD 430","status":"affected"},{"version":"SD 435","status":"affected"},{"version":"SD 450","status":"affected"},{"version":"SD 625","status":"affected"},{"version":"SD 810","status":"affected"},{"version":"SD 820","status":"affected"},{"version":"SD 835","status":"affected"},{"version":"SDM630","status":"affected"},{"version":"SDM636","status":"affected"},{"version":"SDM660","status":"affected"},{"version":"Snapdragon_High_Med_2016","status":"affected"}]}],"references":["https://www.qualcomm.com/company/product-security/bulletins"],"weaknesses":[],"ingestedAt":"2026-10-29T19:43:31.374Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2017/18xxx/CVE-2017-18173.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2017-18173","state":"PUBLISHED","datePublished":"2019-05-06T22:34:44.000Z","dateUpdated":"2024-08-05T21:13:48.916Z","assignerShortName":"qualcomm","assignerOrgId":"2cfc7d3e-20d3-47ac-8db7-1b7285aff15f","dateReserved":"2018-02-05T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"In case of using an invalid android verified boot signature with very large length, an integer underflow occurs in Snapdragon Mobile in SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 810, SD 820, SD 835, SDM630, SDM636, SDM660, Snapdragon_High_Med_2016."}],"affected":[{"vendor":"Qualcomm Technologies, Inc.","product":"Snapdragon Mobile","versions":[{"version":"SD 425","status":"affected"},{"version":"SD 427","status":"affected"},{"version":"SD 430","status":"affected"},{"version":"SD 435","status":"affected"},{"version":"SD 450","status":"affected"},{"version":"SD 625","status":"affected"},{"version":"SD 810","status":"affected"},{"version":"SD 820","status":"affected"},{"version":"SD 835","status":"affected"},{"version":"SDM630","status":"affected"},{"version":"SDM636","status":"affected"},{"version":"SDM660","status":"affected"},{"version":"Snapdragon_High_Med_2016","status":"affected"}]}],"references":[{"url":"https://www.qualcomm.com/company/product-security/bulletins","tags":["x_refsource_MISC"]}],"problemTypes":[{"descriptions":[{"description":"CWE190: Integer Overflow or Wraparound","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"qualcomm","dateUpdated":"2019-05-06T22:34:44.000Z","orgId":"2cfc7d3e-20d3-47ac-8db7-1b7285aff15f"},"datePublic":"2019-03-25T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"product-security@qualcomm.com","ID":"CVE-2017-18173","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Snapdragon Mobile","version":{"version_data":[{"version_value":"SD 425"},{"version_value":"SD 427"},{"version_value":"SD 430"},{"version_value":"SD 435"},{"version_value":"SD 450"},{"version_value":"SD 625"},{"version_value":"SD 810"},{"version_value":"SD 820"},{"version_value":"SD 835"},{"version_value":"SDM630"},{"version_value":"SDM636"},{"version_value":"SDM660"},{"version_value":"Snapdragon_High_Med_2016"}]}}]},"vendor_name":"Qualcomm Technologies, Inc."}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"In case of using an invalid android verified boot signature with very large length, an integer underflow occurs in Snapdragon Mobile in SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 810, SD 820, SD 835, SDM630, SDM636, SDM660, Snapdragon_High_Med_2016."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE190: Integer Overflow or Wraparound"}]}]},"references":{"reference_data":[{"name":"https://www.qualcomm.com/company/product-security/bulletins","refsource":"MISC","url":"https://www.qualcomm.com/company/product-security/bulletins"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.qualcomm.com/company/product-security/bulletins","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-05T21:13:48.916Z"}}]}}}