Not rated
CVE-2017-18141 When a 3rd party TEE has been loaded it is possible for the non-secure world to create a secure monitor call which…
Description
When a 3rd party TEE has been loaded it is possible for the non-secure world to create a secure monitor call which will give it access to privileged functions meant to only be accessible from the TEE in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions IPQ8074, MDM9206, MDM9607, MDM9635M, MDM9650, MDM9655, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SDA660, SDM439, SDM630, SDM660, SDX24, Snapdragon_High_Med_2016.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear | Versions not published |
References
- www.qualcomm.com www.qualcomm.com
- 106128 www.securityfocus.com
Timeline
- Published
- Last modified
Other CVEs of Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
The 123 CVEs of Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear →
CVE-2018-11999
Improper input validation in trustzone can lead to denial of service in snapdragon automobile, snapdragon mobile and…
Not rated
CVE-2018-5915
Exception in Modem IP stack while processing IPv6 packet in snapdragon automobile, snapdragon mobile and snapdragon wear…
Not rated
CVE-2018-5867
Lack of checking input size can lead to buffer overflow In WideVine in snapdragon automobile, snapdragon mobile and…
Not rated
CVE-2018-11288
Possible undefined behavior due to lack of size check in function for parameter segment_idx can lead to a read outside…
Not rated