CVE-2017-18130: In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and...

Security readout for executives and security teams

This issue affects some Qualcomm Snapdragon-based Android devices before the 2018-04-05 security patch level. Playing an ASF media file could trigger a buffer over-read. The public record does not provide CVSS, impact detail, or evidence of active exploitation, so urgency depends on whether affected devices remain in use and unpatched. Exposure is most likely in legacy Android phones, wearables, automotive systems, or embedded devices using the listed Snapdragon platforms and running security patches older than 2018-04-05. Modern managed fleets should mainly treat this as a legacy-device inventory and patch-verification issue. Treat this as a moderate operational priority if legacy Qualcomm Android devices remain active. It is not currently supported as an emergency issue by the provided sources, but unsupported or unpatched Android devices create persistent media-parsing risk. Mitigation focus: Update affected Android devices to security patch level 2018-04-05 or later.; Confirm OEM firmware includes the relevant Qualcomm Android bulletin fixes.; Retire or isolate affected devices that cannot receive vendor updates..

Prepared

Jun 7, 2026, 14:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.