Not rated
CVE-2017-18302 In Snapdragon (Automobile ,Mobile) in version MSM8996AU, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD…
Description
In Snapdragon (Automobile ,Mobile) in version MSM8996AU, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, Snapdragon_High_Med_2016, a crafted HLOS client can modify the structure in memory passed to a QSEE application between the time of check and the time of use, resulting in arbitrary writes to TZ kernel memory regions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Snapdragon Automobile, Snapdragon Mobile | Versions not published |
References
- www.qualcomm.com www.qualcomm.com
- 1041432 www.securitytracker.com
- source.android.com source.android.com
Timeline
- Published
- Last modified
Other CVEs of Snapdragon Automobile, Snapdragon Mobile
The 39 CVEs of Snapdragon Automobile, Snapdragon Mobile →
CVE-2018-5868
Lack of checking input size can lead to buffer overflow In WideVine in snapdragon automobile and snapdragon mobile in…
Not rated
CVE-2017-18320
QSEE unload attempt on a 3rd party TEE without previously loading results in a data abort in snapdragon automobile and…
Not rated
CVE-2017-18318
Missing validation check on CRL issuer name in Snapdragon Automobile, Snapdragon Mobile in versions MSM8996AU, SD…
Not rated
CVE-2017-18317
Restrictions related to the modem (sim lock, sim kill) can be bypassed by manipulating the system to issue a…
Not rated