Medium severity · published Oct 23, 2018
CVE-2017-18313
Under certain mode of operations, HLOS may be able get direct or indirect access through DXE channels to tamper with the authenticated WCNSS firmware stored in DDR because…
5.3
CVSS
0.3%
EPSS
No
On KEV
Description
Under certain mode of operations, HLOS may be able get direct or indirect access through DXE channels to tamper with the authenticated WCNSS firmware stored in DDR because DXE-accessible memory is located within the authenticated image in Snapdragon Mobile and Snapdragon Wear in version MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 615/16/SD 415, SD 617.
CVSS vector
CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Attack vector
Adjacent
Complexity
High
Privileges
None
User interaction
None
Confidentiality
None
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 17% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MF
Msm8909w Firmware · Qualcomm
All versions, or not specified · source: NVD
S2
SD 205 Firmware · Qualcomm
All versions, or not specified · source: NVD
S2
SD 210 Firmware · Qualcomm
All versions, or not specified · source: NVD
S2
SD 212 Firmware · Qualcomm
All versions, or not specified · source: NVD
S4
SD 410 Firmware · Qualcomm
All versions, or not specified · source: NVD
S4
SD 412 Firmware · Qualcomm
All versions, or not specified · source: NVD
S4
SD 415 Firmware · Qualcomm
All versions, or not specified · source: NVD
S6
SD 615 Firmware · Qualcomm
All versions, or not specified · source: NVD
S6
SD 616 Firmware · Qualcomm
All versions, or not specified · source: NVD
S6
SD 617 Firmware · Qualcomm
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-18313
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-18313
Third Party Advisory
https://source.android.com/security/bulletin/2018-09-01#qualcomm-closed-source-components
Vendor Advisory
https://www.qualcomm.com/company/product-security/bulletins
More from Msm8909w Firmware
7.8
CVE-2023-33107
Integer Overflow or Wraparound in Graphics Linux
7.8
CVE-2020-11261
Qualcomm Multiple Chipsets Improper Input Validation Vulnerability
7.8
CVE-2021-1905
Qualcomm Multiple Chipsets Use-After-Free Vulnerability
5.5
CVE-2021-1906
Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability
9.8
CVE-2017-11076
On some hardware revisions where VP9 decoding is hardware-accelerated, the frame size is not programmed correctly into the decoder hardware which can lead to an invalid memory…