{"id":"CVE-2017-18274","state":"PUBLISHED","title":"While iterating through the models contained in a fixed-size array in the actData structure, which also stores an incorrect number of models that is greater than the size of the ar","description":"While iterating through the models contained in a fixed-size array in the actData structure, which also stores an incorrect number of models that is greater than the size of the array, a buffer overflow occurs in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835","publishedAt":"2019-05-06T22:37:54.000Z","updatedAt":"2024-08-05T21:13:49.235Z","severity":null,"assigner":"qualcomm","products":["Qualcomm Technologies, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear"],"affected":[{"vendor":"Qualcomm Technologies, Inc.","product":"Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear","versions":[{"version":"MDM9206","status":"affected"},{"version":"MDM9607","status":"affected"},{"version":"MDM9650","status":"affected"},{"version":"SD 210/SD 212/SD 205","status":"affected"},{"version":"SD 425","status":"affected"},{"version":"SD 430","status":"affected"},{"version":"SD 450","status":"affected"},{"version":"SD 617","status":"affected"},{"version":"SD 625","status":"affected"},{"version":"SD 650/52","status":"affected"},{"version":"SD 820","status":"affected"},{"version":"SD 820A","status":"affected"},{"version":"SD 835","status":"affected"}]}],"references":["https://www.qualcomm.com/company/product-security/bulletins"],"weaknesses":[],"ingestedAt":"2026-10-29T19:43:31.374Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2017/18xxx/CVE-2017-18274.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2017-18274","state":"PUBLISHED","datePublished":"2019-05-06T22:37:54.000Z","dateUpdated":"2024-08-05T21:13:49.235Z","assignerShortName":"qualcomm","assignerOrgId":"2cfc7d3e-20d3-47ac-8db7-1b7285aff15f","dateReserved":"2018-05-18T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"While iterating through the models contained in a fixed-size array in the actData structure, which also stores an incorrect number of models that is greater than the size of the array, a buffer overflow occurs in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835"}],"affected":[{"vendor":"Qualcomm Technologies, Inc.","product":"Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear","versions":[{"version":"MDM9206","status":"affected"},{"version":"MDM9607","status":"affected"},{"version":"MDM9650","status":"affected"},{"version":"SD 210/SD 212/SD 205","status":"affected"},{"version":"SD 425","status":"affected"},{"version":"SD 430","status":"affected"},{"version":"SD 450","status":"affected"},{"version":"SD 617","status":"affected"},{"version":"SD 625","status":"affected"},{"version":"SD 650/52","status":"affected"},{"version":"SD 820","status":"affected"},{"version":"SD 820A","status":"affected"},{"version":"SD 835","status":"affected"}]}],"references":[{"url":"https://www.qualcomm.com/company/product-security/bulletins","tags":["x_refsource_MISC"]}],"problemTypes":[{"descriptions":[{"description":"CWE129: Improper Validation of Array Index","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"qualcomm","dateUpdated":"2019-05-06T22:37:54.000Z","orgId":"2cfc7d3e-20d3-47ac-8db7-1b7285aff15f"},"datePublic":"2019-03-25T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"product-security@qualcomm.com","ID":"CVE-2017-18274","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear","version":{"version_data":[{"version_value":"MDM9206"},{"version_value":"MDM9607"},{"version_value":"MDM9650"},{"version_value":"SD 210/SD 212/SD 205"},{"version_value":"SD 425"},{"version_value":"SD 430"},{"version_value":"SD 450"},{"version_value":"SD 617"},{"version_value":"SD 625"},{"version_value":"SD 650/52"},{"version_value":"SD 820"},{"version_value":"SD 820A"},{"version_value":"SD 835"}]}}]},"vendor_name":"Qualcomm Technologies, Inc."}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"While iterating through the models contained in a fixed-size array in the actData structure, which also stores an incorrect number of models that is greater than the size of the array, a buffer overflow occurs in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835"}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE129: Improper Validation of Array Index"}]}]},"references":{"reference_data":[{"name":"https://www.qualcomm.com/company/product-security/bulletins","refsource":"MISC","url":"https://www.qualcomm.com/company/product-security/bulletins"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.qualcomm.com/company/product-security/bulletins","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-05T21:13:49.235Z"}}]}}}