CVE-2017-18145: In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909...

Security readout for executives and security teams

This vulnerability affects older Android builds on specific Qualcomm Snapdragon Mobile and Snapdragon Wear platforms. The issue is in Qualcomm-related DPM native processing of framework events, where a deleted iterator pointer may be reused on later events. The public bundle does not state severity, impact, or active exploitation. Exposure is most likely on Android phones, tablets, embedded Android devices, or Snapdragon Wear devices using the listed Qualcomm platforms and running security patch levels before 2018-04-05. Current, vendor-supported devices patched at or after 2018-04-05 are less likely exposed based on the provided description. Priority should be asset-driven. This is not enough evidence for emergency treatment, but any business-critical Android or wearable fleet still below the April 5, 2018 patch level should be remediated or retired because vendor support is likely the deciding control. Mitigation focus: Update affected Android devices to security patch level 2018-04-05 or later where available.; Check OEM, carrier, and Qualcomm-linked vendor advisories for device-specific firmware availability.; Prioritize replacement or isolation for unsupported affected devices that cannot receive patches..

Prepared

Jun 7, 2026, 14:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.