Not rated
CVE-2017-18125 In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607,…
Description
In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 835, SD 845, SD 850, when secure camera is activated it stores captured data in protected buffers. The TEE application which uses secure camera expects those buffers to contain data captured during the current camera session. It is possible though for HLOS to put aside and reuse one or more of the protected buffers with previously captured data during next camera session. Such data reuse must be prevented as the TEE applications expects to receive valid data captured during the current session only.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Snapdragon Mobile, Snapdragon Wear | Versions not published |
Other CVEs of Snapdragon Mobile, Snapdragon Wear
The 132 CVEs of Snapdragon Mobile, Snapdragon Wear →
CVE-2017-18160
AGPS session failure in GNSS module due to cyphersuites are hardcoded and needed manual update everytime in snapdragon…
Not rated
CVE-2018-5879
Improper length check while processing an MQTT message can lead to heap overflow in snapdragon mobile and snapdragon…
Not rated
CVE-2018-5880
Improper data length check while processing an event report indication can lead to a buffer overflow in snapdragon…
Not rated
CVE-2018-11284
Spoofed SMS can be used to send a large number of messages to the device which will in turn initiate a flood of…
Not rated