CVE-2017-18138: In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206...

Security readout for executives and security teams

This flaw affects certain Android devices using listed Qualcomm Snapdragon Mobile and Wear chipsets before the 2018-04-05 Android security patch level. The public description says a buffer overflow may occur in GERAN, a cellular radio technology area. Business risk depends on whether legacy devices remain in use and whether OEM firmware updates were applied. Likely exposure is older Android phones, tablets, wearables, or embedded devices using the listed Qualcomm chipsets and running patch levels before 2018-04-05. Exposure cannot be confirmed from chipset name alone; verify device model, Android security patch level, and OEM firmware history. Prioritize this as a legacy mobile and wearable fleet hygiene issue unless local inventory shows affected, unpatched devices. The absence of CVSS and exploitation evidence limits urgency assessment, but unsupported cellular devices can create persistent unmanaged exposure. Mitigation focus: Update affected Android devices to security patch level 2018-04-05 or later.; Use OEM or carrier firmware guidance for exact device applicability.; Retire unsupported devices that cannot receive relevant Android or modem security updates..

Prepared

Jun 7, 2026, 14:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.