CVE-2017-18139: In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206...

Security readout for executives and security teams

This Android Qualcomm issue is a possible buffer overflow in the IMS calling path on many Snapdragon Mobile and Wear chipsets. The public record ties exposure to Android devices before the 2018-04-05 security patch level. Business risk is mainly older or unpatched Android fleets; public severity and exploit details are not provided. Likely exposure is older Android phones, wearables, or embedded devices using the listed Qualcomm Snapdragon platforms and running an Android security patch level earlier than 2018-04-05. Exact device impact depends on OEM firmware adoption and whether the device includes the vulnerable Qualcomm components. Prioritize as a legacy mobile hygiene issue unless critical business devices remain below the 2018-04-05 patch level. The broad chipset list raises exposure potential, but missing severity and exploitation evidence prevent a stronger urgency rating from the provided sources. Mitigation focus: Update affected Android devices to security patch level 2018-04-05 or later.; Confirm OEM firmware includes the relevant Qualcomm security bulletin fix.; Prioritize unsupported devices for replacement or isolation..

Prepared

Jun 7, 2026, 14:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.