CVE-2017-18137: In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile MDM9640, MDM9645, MDM9650,...

Security readout for executives and security teams

This flaw affects Android devices using listed Qualcomm Snapdragon Mobile chipsets before the 2018-04-05 security patch level. A buffer overflow can occur while processing an IPv6 PDP address in mobile data context handling. The sources do not provide severity scoring, exploit details, or confirmed real-world attacks. Exposure is most likely in Android phones, tablets, or embedded/mobile devices using the listed Qualcomm modem or Snapdragon platforms that remain below Android patch level 2018-04-05. Unsupported or carrier-locked devices may be harder to remediate. Prioritize if the organization still operates older Android or embedded cellular devices with affected Qualcomm platforms. The business risk is hard to quantify because public sources lack severity and exploitation evidence, but unpatched modem-related memory corruption should not be ignored. Mitigation focus: Apply OEM firmware with Android security patch level 2018-04-05 or later.; Confirm the update includes the relevant Qualcomm component fixes.; Check Qualcomm, Android, carrier, and device OEM guidance for model-specific remediation..

Prepared

Jun 7, 2026, 14:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.