CVE-2017-18293

HIGH

Qualcomm Snapdragon Mobile and Wear - GPIO Protection Bypass

Title source: llm

Description

When a particular GPIO is protected by blocking access to the corresponding GPIO resource registers, the protection can be bypassed using the corresponding banked GPIO registers instead in Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 835, SDA660.

References (3)

Core 3

Core References

Vendor Advisory x_refsource_confirm

https://www.qualcomm.com/company/product-security/bulletins

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1041432

Third Party Advisory x_refsource_confirm

https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components

Scores

CVSS v3 7.8

EPSS 0.0004

EPSS Percentile 13.8%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

Status published

Products (14)

qualcomm/mdm9206_firmware

qualcomm/mdm9607_firmware

qualcomm/mdm9650_firmware

qualcomm/sd_205_firmware

qualcomm/sd_210_firmware

qualcomm/sd_212_firmware

qualcomm/sd_425_firmware

qualcomm/sd_430_firmware

qualcomm/sd_450_firmware

qualcomm/sd_625_firmware

... and 4 more

Published Oct 23, 2018

Tracked Since Feb 18, 2026