Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2017-18141

When a 3rd party TEE has been loaded it is possible for the non-secure world to create a secure monitor call which will give it access to privileged functions meant to only be accessible from the TEE in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions IPQ8074, MDM9206, MDM9607, MDM9635M, MDM9650, MDM9655, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SDA660, SDM439, SDM630, SDM660, SDX24, Snapdragon_High_Med_2016.

Published

2019-01-03T15:29:00.333

Last Modified

2024-11-21T03:19:26.580

Status

Modified

Source

[email protected]

Severity

CVSSv3.0: 7.8 (HIGH)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

3.9

Impact Score

10.0

Weaknesses
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System qualcomm ipq8074_firmware - Yes
Hardware qualcomm ipq8074 - No
Operating System qualcomm mdm9206_firmware - Yes
Hardware qualcomm mdm9206 - No
Operating System qualcomm mdm9607_firmware - Yes
Hardware qualcomm mdm9607 - No
Operating System qualcomm mdm9635m_firmware - Yes
Hardware qualcomm mdm9635m - No
Operating System qualcomm mdm9650_firmware - Yes
Hardware qualcomm mdm9650 - No
Operating System qualcomm mdm9655_firmware - Yes
Hardware qualcomm mdm9655 - No
Operating System qualcomm msm8996au_firmware - Yes
Hardware qualcomm msm8996au - No
Operating System qualcomm sd_210_firmware - Yes
Hardware qualcomm sd_210 - No
Operating System qualcomm sd_212_firmware - Yes
Hardware qualcomm sd_212 - No
Operating System qualcomm sd_205_firmware - Yes
Hardware qualcomm sd_205 - No
Operating System qualcomm sd_410_firmware - Yes
Hardware qualcomm sd_410 - No
Operating System qualcomm sd_412_firmware - Yes
Hardware qualcomm sd_412 - No
Operating System qualcomm sd_425_firmware - Yes
Hardware qualcomm sd_425 - No
Operating System qualcomm sd_427_firmware - Yes
Hardware qualcomm sd_427 - No
Operating System qualcomm sd_430_firmware - Yes
Hardware qualcomm sd_430 - No
Operating System qualcomm sd_435_firmware - Yes
Hardware qualcomm sd_435 - No
Operating System qualcomm sd_439_firmware - Yes
Hardware qualcomm sd_439 - No
Operating System qualcomm sd_429_firmware - Yes
Hardware qualcomm sd_429 - No
Operating System qualcomm sd_450_firmware - Yes
Hardware qualcomm sd_450 - No
Operating System qualcomm sd_625_firmware - Yes
Hardware qualcomm sd_625 - No
Operating System qualcomm sd_632_firmware - Yes
Hardware qualcomm sd_632 - No
Operating System qualcomm sd_636_firmware - Yes
Hardware qualcomm sd_636 - No
Operating System qualcomm sd_650_firmware - Yes
Hardware qualcomm sd_650 - No
Operating System qualcomm sd_652_firmware - Yes
Hardware qualcomm sd_652 - No
Operating System qualcomm sd_810_firmware - Yes
Hardware qualcomm sd_810 - No
Operating System qualcomm sd_820_firmware - Yes
Hardware qualcomm sd_820 - No
Operating System qualcomm sd_820a_firmware - Yes
Hardware qualcomm sd_820a - No
Operating System qualcomm sd_835_firmware - Yes
Hardware qualcomm sd_835 - No
Operating System qualcomm sda660_firmware - Yes
Hardware qualcomm sda660 - No
Operating System qualcomm sdm439_firmware - Yes
Hardware qualcomm sdm439 - No
Operating System qualcomm sdm630_firmware - Yes
Hardware qualcomm sdm630 - No
Operating System qualcomm sdm660_firmware - Yes
Hardware qualcomm sdm660 - No
Operating System qualcomm sdx24_firmware - Yes
Hardware qualcomm sdx24 - No
Operating System qualcomm snapdragon_high_med_2016_firmware - Yes
Hardware qualcomm snapdragon_high_med_2016 - No
References