CVE-2017-18129

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9206, MDM9607, SD 845, MSM8996, MSM8998, it is possible for IPA (internet protocol accelerator) channels owned by one security domain to be controlled from other domains.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:qualcomm:msm8996_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:msm8996:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:qualcomm:msm8998_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:msm8998:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sd_845:-:*:*:*:*:*:*:*

History

21 Nov 2024, 03:19

Type Values Removed Values Added
References () http://www.securityfocus.com/bid/103671 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/103671 - Third Party Advisory, VDB Entry
References () https://source.android.com/security/bulletin/2018-04-01 - Vendor Advisory () https://source.android.com/security/bulletin/2018-04-01 - Vendor Advisory

Information

Published : 2018-04-11 15:29

Updated : 2024-11-21 03:19


NVD link : CVE-2017-18129

Mitre link : CVE-2017-18129

CVE.ORG link : CVE-2017-18129


JSON object : View

Products Affected

qualcomm

  • sd_845_firmware
  • mdm9607_firmware
  • msm8996_firmware
  • msm8998
  • mdm9206
  • msm8998_firmware
  • mdm9607
  • msm8996
  • sd_845
  • mdm9206_firmware
CWE
CWE-668

Exposure of Resource to Wrong Sphere