Medium severity · published Sep 20, 2018
CVE-2017-18302
In Snapdragon (Automobile ,Mobile) in version MSM8996AU, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SDA660, SDM429, SDM439, SDM630,…
4.7
CVSS
0.2%
EPSS
No
On KEV
Description
In Snapdragon (Automobile ,Mobile) in version MSM8996AU, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, Snapdragon_High_Med_2016, a crafted HLOS client can modify the structure in memory passed to a QSEE application between the time of check and the time of use, resulting in arbitrary writes to TZ kernel memory regions.
CVSS vector
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N
Attack vector
Local
Complexity
High
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 7% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MF
Msm8996au Firmware · Qualcomm
All versions, or not specified · source: NVD
SF
Sd425 Firmware · Qualcomm
All versions, or not specified · source: NVD
SF
Sd427 Firmware · Qualcomm
All versions, or not specified · source: NVD
SF
Sd430 Firmware · Qualcomm
All versions, or not specified · source: NVD
SF
Sd435 Firmware · Qualcomm
All versions, or not specified · source: NVD
SF
Sd450 Firmware · Qualcomm
All versions, or not specified · source: NVD
SF
Sd625 Firmware · Qualcomm
All versions, or not specified · source: NVD
SF
Sd650 Firmware · Qualcomm
All versions, or not specified · source: NVD
SF
Sd652 Firmware · Qualcomm
All versions, or not specified · source: NVD
SF
Sd820 Firmware · Qualcomm
All versions, or not specified · source: NVD
SF
Sd820a Firmware · Qualcomm
All versions, or not specified · source: NVD
SF
Sd835 Firmware · Qualcomm
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-18302
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-18302
Third Party Advisory
http://www.securitytracker.com/id/1041432
Vendor Advisory
https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components
Vendor Advisory
https://www.qualcomm.com/company/product-security/bulletins
More from Msm8996au Firmware
7.8
CVE-2023-33107
Integer Overflow or Wraparound in Graphics Linux
7.8
CVE-2020-11261
Qualcomm Multiple Chipsets Improper Input Validation Vulnerability
7.8
CVE-2021-1905
Qualcomm Multiple Chipsets Use-After-Free Vulnerability
5.5
CVE-2021-1906
Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability
9.8
CVE-2025-21483
Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs