Lucene search

[email protected]CVE-2017-18279

HistoryMay 06, 2019 - 11:29 p.m.

CVE-2017-18279

2019-05-0623:29:00

CWE-190

[email protected]

web.nvd.nist.gov

cve-2017-18279

buffer overflow

snapdragon

small cell soc

camera module

security vulnerability

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.4 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

Lack of check of buffer length before copying can lead to buffer overflow in camera module in Small Cell SoC, Snapdragon Mobile, Snapdragon Wear in FSM9055, FSM9955, IPQ4019, IPQ8064, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCA9531, QCA9558, QCA9563, QCA9880, QCA9886, QCA9980, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 800, SD 810, SD 820, SD 835, SDM630, SDM636, SDM660, SDX20, Snapdragon_High_Med_2016.

Affected configurations

NVD

Node

qualcommfsm9055_firmwareMatch-

AND

qualcommfsm9055Match-

Node

qualcommfsm9955_firmwareMatch-

AND

qualcommfsm9955Match-

Node

qualcommipq4019_firmwareMatch-

AND

qualcommipq4019Match-

Node

qualcommmdm9206_firmwareMatch-

AND

qualcommmdm9206Match-

Node

qualcommmdm9607_firmwareMatch-

AND

qualcommmdm9607Match-

Node

qualcommmdm9640_firmwareMatch-

AND

qualcommmdm9640Match-

Node

qualcommmdm9650_firmwareMatch-

AND

qualcommmdm9650Match-

Node

qualcommmsm8909w_firmwareMatch-

AND

qualcommmsm8909wMatch-

Node

qualcommmsm8996au_firmwareMatch-

AND

qualcommmsm8996auMatch-

Node

qualcommqca9531_firmwareMatch-

AND

qualcommqca9531Match-

Node

qualcommqca9558_firmwareMatch-

AND

qualcommqca9558Match-

Node

qualcommqca9563_firmwareMatch-

AND

qualcommqca9563Match-

Node

qualcommqca9880_firmwareMatch-

AND

qualcommqca9880Match-

Node

qualcommqca9886_firmwareMatch-

AND

qualcommqca9886Match-

Node

qualcommqca9980_firmwareMatch-

AND

qualcommqca9980Match-

Node

qualcommsd_210_firmwareMatch-

AND

qualcommsd_210Match-

Node

qualcommsd_212_firmwareMatch-

AND

qualcommsd_212Match-

Node

qualcommsd_205_firmwareMatch-

AND

qualcommsd_205Match-

Node

qualcommsd_425_firmwareMatch-

AND

qualcommsd_425Match-

Node

qualcommsd_427_firmwareMatch-

AND

qualcommsd_427Match-

Node

qualcommsd_430_firmwareMatch-

AND

qualcommsd_430Match-

Node

qualcommsd_435_firmwareMatch-

AND

qualcommsd_435Match-

Node

qualcommsd_450_firmwareMatch-

AND

qualcommsd_450Match-

Node

qualcommsd_615_firmwareMatch-

AND

qualcommsd_615Match-

Node

qualcommsd_616_firmwareMatch-

AND

qualcommsd_616Match-

Node

qualcommsd_415_firmwareMatch-

AND

qualcommsd_415Match-

Node

qualcommsd_625_firmwareMatch-

AND

qualcommsd_625Match-

Node

qualcommsd_650_firmwareMatch-

AND

qualcommsd_650Match-

Node

qualcommsd_652_firmwareMatch-

AND

qualcommsd_652Match-

Node

qualcommsd_800_firmwareMatch-

AND

qualcommsd_800Match-

Node

qualcommsd_810_firmwareMatch-

AND

qualcommsd_810Match-

Node

qualcommsd_820_firmwareMatch-

AND

qualcommsd_820Match-

Node

qualcommsd_835_firmwareMatch-

AND

qualcommsd_835Match-

Node

qualcommsdm630_firmwareMatch-

AND

qualcommsdm630Match-

Node

qualcommsdm636_firmwareMatch-

AND

qualcommsdm636Match-

Node

qualcommsdm660_firmwareMatch-

AND

qualcommsdm660Match-

Node

qualcommsdx20_firmwareMatch-

AND

qualcommsdx20Match-

Node

qualcommsnapdragon_high_med_2016_firmwareMatch-

AND

qualcommsnapdragon_high_med_2016Match-

Node

qualcommipq8064_firmwareMatch-

AND

qualcommipq8064Match-

CPENameOperatorVersion
qualcomm:fsm9055_firmwarequalcomm fsm9055 firmwareeq-

CPE	Name	Operator	Version
qualcomm:fsm9055_firmware	qualcomm fsm9055 firmware	eq	-

CNA Affected

[
  {
    "product": "Small Cell SoC, Snapdragon Mobile, Snapdragon Wear",
    "vendor": "Qualcomm Technologies, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "FSM9055"
      },
      {
        "status": "affected",
        "version": "FSM9955"
      },
      {
        "status": "affected",
        "version": "IPQ4019"
      },
      {
        "status": "affected",
        "version": "IPQ8064"
      },
      {
        "status": "affected",
        "version": "MDM9206"
      },
      {
        "status": "affected",
        "version": "MDM9607"
      },
      {
        "status": "affected",
        "version": "MDM9640"
      },
      {
        "status": "affected",
        "version": "MDM9650"
      },
      {
        "status": "affected",
        "version": "MSM8909W"
      },
      {
        "status": "affected",
        "version": "MSM8996AU"
      },
      {
        "status": "affected",
        "version": "QCA9531"
      },
      {
        "status": "affected",
        "version": "QCA9558"
      },
      {
        "status": "affected",
        "version": "QCA9563"
      },
      {
        "status": "affected",
        "version": "QCA9880"
      },
      {
        "status": "affected",
        "version": "QCA9886"
      },
      {
        "status": "affected",
        "version": "QCA9980"
      },
      {
        "status": "affected",
        "version": "SD 210/SD 212/SD 205"
      },
      {
        "status": "affected",
        "version": "SD 425"
      },
      {
        "status": "affected",
        "version": "SD 427"
      },
      {
        "status": "affected",
        "version": "SD 430"
      },
      {
        "status": "affected",
        "version": "SD 435"
      },
      {
        "status": "affected",
        "version": "SD 450"
      },
      {
        "status": "affected",
        "version": "SD 615/16/SD 415"
      },
      {
        "status": "affected",
        "version": "SD 625"
      },
      {
        "status": "affected",
        "version": "SD 650/52"
      },
      {
        "status": "affected",
        "version": "SD 800"
      },
      {
        "status": "affected",
        "version": "SD 810"
      },
      {
        "status": "affected",
        "version": "SD 820"
      },
      {
        "status": "affected",
        "version": "SD 835"
      },
      {
        "status": "affected",
        "version": "SDM630"
      },
      {
        "status": "affected",
        "version": "SDM636"
      },
      {
        "status": "affected",
        "version": "SDM660"
      },
      {
        "status": "affected",
        "version": "SDX20"
      },
      {
        "status": "affected",
        "version": "Snapdragon_High_Med_2016"
      }
    ]
  }
]

References

www.qualcomm.com/company/product-security/bulletins

Social References

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.4 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

Related for CVE-2017-18279

cvelist1 prion1 nvd1