CVE-2017-18302

🗓️ 20 Sep 2018 13:00:00Reported by qualcommType

Snapdragon (Automobile, Mobile) version MSM8996AU, SD 425-450, 625-660 and others allows arbitrary writes to TZ kernel memory region

Reporter	Title	Published	Views	Family All 4
Cvelist	CVE-2017-18302	20 Sep 201813:00	–	cvelist
EUVD	EUVD-2017-9428	7 Oct 202500:30	–	euvd
NVD	CVE-2017-18302	20 Sep 201813:29	–	nvd
Prion	Memory corruption	20 Sep 201813:29	–	prion

NVD

Node

qualcomm msm8996au_firmwareMatch-

AND

qualcomm msm8996auMatch-

Node

qualcomm sd425_firmwareMatch-

AND

qualcomm sd425Match-

Node

qualcomm sd427_firmwareMatch-

AND

qualcomm sd427Match-

Node

qualcomm sd430_firmwareMatch-

AND

qualcomm sd430Match-

Node

qualcomm sd435_firmwareMatch-

AND

qualcomm sd435Match-

Node

qualcomm sd450_firmwareMatch-

AND

qualcomm sd450Match-

Node

qualcomm sd625_firmwareMatch-

AND

qualcomm sd625Match-

Node

qualcomm sd650_firmwareMatch-

AND

qualcomm sd650Match-

Node

qualcomm sd652_firmwareMatch-

AND

qualcomm sd652Match-

Node

qualcomm sd820_firmwareMatch-

AND

qualcomm sd820Match-

Node

qualcomm sd820a_firmwareMatch-

AND

qualcomm sd820aMatch-

Node

qualcomm sd835_firmwareMatch-

AND

qualcomm sd835Match-

Node

qualcomm sda660_firmwareMatch-

AND

qualcomm sda660Match-

Node

qualcomm sdm429_firmwareMatch-

AND

qualcomm sdm429Match-

Node

qualcomm sdm439_firmwareMatch-

AND

qualcomm sdm439Match-

Node

qualcomm sdm630_firmwareMatch-

AND

qualcomm sdm630Match-

Node

qualcomm sdm632_firmwareMatch-

AND

qualcomm sdm632Match-

Node

qualcomm sdm636_firmwareMatch-

AND

qualcomm sdm636Match-

Node

qualcomm sdm660_firmwareMatch-

AND

qualcomm sdm660Match-

[
  {
    "product": "Snapdragon Automobile, Snapdragon Mobile",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "MSM8996AU, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, Snapdragon_High_Med_2016"
      }
    ]
  }
]

Source	Link
securitytracker	www.securitytracker.com/id/1041432
qualcomm	www.qualcomm.com/company/product-security/bulletins
source	www.source.android.com/security/bulletin/2018-08-01

21 Nov 2024 03:19Current

5.3Medium risk

Vulners AI Score5.3

CVSS 34.7

CVSS 24.7

EPSS0.00047

CWE-362