CVE-2017-18129

CRITICAL

Qualcomm MDM9206, MDM9607, MSM8996, MSM8998, SD 845 - Resource Exposure via IPA Channel

Title source: llm

Description

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9206, MDM9607, SD 845, MSM8996, MSM8998, it is possible for IPA (internet protocol accelerator) channels owned by one security domain to be controlled from other domains.

References (2)

Core 2

Core References

Vendor Advisory x_refsource_confirm

https://source.android.com/security/bulletin/2018-04-01

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/103671

Scores

CVSS v3 9.8

EPSS 0.0021

EPSS Percentile 42.8%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-668

Status published

Products (5)

qualcomm/mdm9206_firmware

qualcomm/mdm9607_firmware

qualcomm/msm8996_firmware

qualcomm/msm8998_firmware

qualcomm/sd_845_firmware

Published Apr 11, 2018

Tracked Since Feb 18, 2026