CVE-2017-18071: In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206...

Security readout for executives and security teams

This is an Android Qualcomm chipset issue where a device’s debug policy could potentially be bypassed before the 2018-04-05 Android security patch level. The public data does not explain practical impact, attack path, or exploitation. Risk is mainly for older Android Mobile or Wear devices that still run affected Snapdragon platforms without the April 2018 patch. Exposure is most likely in legacy Android phones, IoT-style Android devices, and Wear devices using the listed Qualcomm chipsets and running an Android security patch level before 2018-04-05. Treat this as a legacy-device hygiene issue with uncertain severity. It should not outrank confirmed exploited vulnerabilities, but unsupported affected Android devices should be patched, isolated, or replaced during normal risk reduction work. Mitigation focus: Confirm affected devices are updated to Android security patch level 2018-04-05 or later.; Check OEM, Android, and Qualcomm guidance for device-specific firmware availability.; Retire or isolate unsupported affected devices that cannot receive vendor updates..

Prepared

Jun 7, 2026, 14:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.