CVE-2017-18126

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9640, MDM9650, QCA6174A, QCA6574, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9379, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 835, SD 845, SDM630, SDM636, SDM660, Snapdragon_High_Med_2016, the original mac spoofing feature does not use the following in probe request frames: (a) randomized sequence numbers and (b) randomized source address for cfg80211 scan, vendor scan and pno scan which may affect user privacy.

• http://www.securityfocus.com/bid/103671Third Party Advisory, VDB Entry
• https://source.android.com/security/bulletin/2018-04-01Vendor Advisory
• http://www.securityfocus.com/bid/103671Third Party Advisory, VDB Entry
• https://source.android.com/security/bulletin/2018-04-01Vendor Advisory

Published

Apr 11, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-18120A double-free bug in the read_gif function in gifread.c in g…
• CVE-2017-18121The consentAdmin module in SimpleSAMLphp through 1.14.15 is …
• CVE-2017-18122A signature-validation bypass issue was discovered in Simple…
• CVE-2017-18123The call parameter of /lib/exe/ajax.php in DokuWiki through …
• CVE-2017-18124During secure boot, addition is performed on uint8 ptrs whic…
• CVE-2017-18125In Android before security patch level 2018-04-05 on Qualcom…
• CVE-2017-18127In Android before security patch level 2018-04-05 on Qualcom…
• CVE-2017-18128In Android before security patch level 2018-04-05 on Qualcom…
• CVE-2017-18129In Android before security patch level 2018-04-05 on Qualcom…
• CVE-2017-1813Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-18130In Android before security patch level 2018-04-05 on Qualcom…
• CVE-2017-18131In QTEE, an incorrect fuse value can be blown in Snapdragon …