AndroidVulnerabilities.org

CVE-2017-18311

(json)

• CVE numbers: CVE-2017-18311 [Bulletin-CVE-2017-18311]
• Coordinated disclosure?: unknown
• Categories: Qualcomm closed-source components
• Details: XPU Master privilege escalation is possible due to improper access control of unused configuration xPU ports where unused configuration ports are open in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, Snapdragon_High_Med_2016. [NIST-CVE-2017-18311]
• Discovered by: on: Unknown
• Reported on: 2018-09-01 [Bulletin-CVE-2017-18311]
• Fixed on: Unknown
• Fix released on: 2018-09-05 [Bulletin-CVE-2017-18311]
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2017-18311]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-25