LiveActive security incident?Get immediate response
CVE Record

CVE-2017-18052: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux ker...

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for cmpl_params->num_reports, param_buf->desc_ids and param_buf->status in wma_mgmt_tx_bundle_completion_handler(), which is received from firmware, leads to potential out of bounds memory read.

UnknownCVSS not scoredNot KEV-listedUpdated
Discuss exposureBack to CVEs
Glexia's TakeAutomated analysisunknown

Security readout for executives and security teams

Plain-English summary

This CVE describes a Qualcomm Android WLAN/kernel flaw where data returned from Wi-Fi firmware was not validated before memory was read. In affected CAF-based Android builds, that could cause out-of-bounds memory reads. The public record does not provide CVSS, confirmed affected versions, or active exploitation evidence.

Executive priority

Treat this as a legacy mobile firmware risk. It is not justified as an emergency from the provided evidence, but unpatched or unsupported Qualcomm-based Android fleets should be reviewed because kernel/WLAN issues are hard to mitigate locally.

Technical view

The issue is improper validation of firmware-supplied cmpl_params->num_reports, param_buf->desc_ids, and param_buf->status in wma_mgmt_tx_bundle_completion_handler(). The stated impact is potential out-of-bounds memory read in Android for MSM, Firefox OS for MSM, QRD Android, and Android CAF Linux kernel releases.

Likely exposure

Exposure is most likely in older Qualcomm/CAF-derived Android device firmware that includes the affected WLAN kernel code. The source bundle does not identify exact devices, versions, CPEs, or downstream OEM patch status.

Exploitation context

The CVE is not listed as KEV in the provided bundle, and no cited source states active exploitation. Public evidence here supports a memory-read vulnerability description and vendor references, not exploit availability or real-world abuse.

Researcher notes

The key boundary is firmware-to-host input validation in WLAN management transmit bundle completion handling. Evidence is incomplete: no CVSS vector, CWE, precise version list, or exploit status is provided in the bundle. Validate through source or firmware provenance rather than product-name assumptions.

Mitigation direction

  • Check OEM or Qualcomm guidance for CVE-2017-18052 coverage.
  • Update affected Android device firmware to a vendor-supported fixed build.
  • Prioritize unsupported Qualcomm-based devices for replacement or isolation.
  • Review the Pixel March 2018 bulletin for relevant security patch context.
  • Track whether downstream CAF kernel trees include the referenced fix.

Validation and detection

  • Inventory Android devices using Qualcomm MSM or CAF-derived WLAN kernels.
  • Check Android security patch levels against vendor March 2018 guidance.
  • Confirm whether qcacld-3.0 includes commit c04c4870bd86a5f878553d7acf207388f3d6c3bd or equivalent.
  • Ask OEMs for explicit CVE-2017-18052 remediation confirmation.
  • Document devices where firmware provenance cannot be verified.
Prepared
Confidence
medium
Sources
4

Public sources used

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.

Potential ATT&CK relevance

Conservative CVE-to-ATT&CK context

These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.

ATT&CK lookup starting points

Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.

cve · low confidence lookup

CVE-2017-18052 mapping review

Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.

Open ATT&CK lookup
Vulnerability profileCVE Program record
Severity
Unknown
CVSS
Not scored
Known Exploited
No
Published
Official CVE source material

CNA and ADP enrichment extracted from CVE v5

These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.

0CVSS vectors
0Timeline events
0ADP providers
3Source links

CVSS and timeline data

No CVSS vectors or timeline events were available in the normalized CVE source material.

Source materials

Affected products

Products and packages named in the record

VendorProductVersion / packageStatus
n/an/an/aListed
Weakness

CWE details

No CWE listed

CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.