CVE-2017-18129: In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile and Snapdragon Mobile M...

Security readout for executives and security teams

This is a Qualcomm Snapdragon issue fixed by Android's April 5, 2018 security patch level. The concern is weakened separation between security domains controlling IPA network accelerator channels. For executives, the main urgency is finding legacy mobile or automotive devices still running old firmware, not responding to a confirmed active campaign. Exposure is likely limited to Android-based devices using the listed Qualcomm chipsets and running firmware older than the 2018-04-05 Android security patch level. The sources identify chip families, not specific OEM device models, so asset and firmware validation is required. Set this as a legacy exposure review item. It is not supported here as an emergency exploitation event, but old Qualcomm-based mobile or automotive assets can persist for years and may remain unpatched outside normal IT visibility. Mitigation focus: Update affected Android devices to security patch level 2018-04-05 or later.; Check OEM or Qualcomm guidance for device-specific firmware containing the April 2018 Android fixes.; Retire or isolate unsupported affected devices with no patch path..

Prepared

Jun 7, 2026, 14:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.