CVE:CVE-2017-18137
CNNVD:CNNVD-201804-546
Android是美国谷歌（Google）公司和开放手持设备联盟（简称OHA）共同开发的一套以Linux为基础的开源操作系统。Qualcomm MDM9640等都是美国高通（Qualcomm）公司应用于不同平台的中央处理器（CPU）产品。
Android 2018-04-05之前版本中的Qualcomm闭源组件存在缓冲区溢出漏洞。攻击者可利用该漏洞执行任意代码或造成拒绝服务。以下产品（用于手机）受到影响：Qualcomm MDM9640；Qualcomm MDM9645；Qualcomm MDM9650；Qualcomm MDM9655；Qualcomm SD 450；Qualcomm SD 625；Qualcomm SD 650/52；Qualcomm SD 810；Qualcomm SD 820；Qualcomm SD 835。
solution:Upgrade qualcomm mdm9640_firmware to a higher version than -; Upgrade qualcomm mdm9645_firmware to a higher version than -; Upgrade qualcomm mdm9650_firmware to a higher version than -; Upgrade qualcomm mdm9655_firmware to a higher version than -; Upgrade qualcomm sd_450_firmware to a higher version than -; Upgrade qualcomm sd_625_firmware to a higher version than -; Upgrade qualcomm sd_650_firmware to a higher version than -; Upgrade qualcomm sd_652_firmware to a higher version than -; Upgrade qualcomm sd_810_firmware to a higher version than -; Upgrade qualcomm sd_820_firmware to a higher version than -; Upgrade qualcomm sd_835_firmware to a higher version than -