CVE-2017-14911

2018-01-0200:00:00

qualcomm

www.cve.org

9.6 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

77.2%

JSON

In Android before 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile, Snapdragon Automobile APQ8096AU, MDM9206, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 625, SD 650/52, SD 820, SD 835, it is possible for the XBL loader to skip the authentication of device config.

CNA Affected

[
  {
    "product": "Snapdragon IoT, Snapdragon Mobile, Snapdragon Automobile",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "APQ8096AU, MDM9206, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 625, SD 650/52, SD 820, SD 835"
      }
    ]
  }
]