First published: Tue Jan 02 2018(Updated: )
In Android before 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile [VERSION]: MDM9206, MDM9607, MDM9650, MSM8909W, SD 200, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 835, the attributes of buffers in Secure Display were not marked properly.
Credit: product-security@qualcomm.com
Affected Software | Affected Version | How to fix |
---|---|---|
Qualcomm MDM9206 firmware | ||
Qualcomm MDM9206 | ||
Qualcomm MDM9607 firmware | ||
Qualcomm MDM9607 | ||
Qualcomm MDM9650 firmware | ||
Qualcomm MDM9650 | ||
Qualcomm MSM8909W | ||
Qualcomm MSM8909W | ||
qualcomm SD 210 firmware | ||
qualcomm SD 210 | ||
qualcomm SD 212 firmware | ||
qualcomm SD 212 | ||
qualcomm SD 205 firmware | ||
qualcomm SD 205 | ||
qualcomm SD 400 firmware | ||
qualcomm SD 400 | ||
qualcomm sd 410 firmware | ||
qualcomm sd 410 | ||
qualcomm sd 412 firmware | ||
qualcomm sd 412 | ||
qualcomm SD 425 firmware | ||
qualcomm SD 425 | ||
Qualcomm SD 430 firmware | ||
Qualcomm SD 430 | ||
qualcomm sd 615 firmware | ||
qualcomm sd 615 | ||
qualcomm sd 616 firmware | ||
qualcomm sd 616 | ||
qualcomm sd 415 firmware | ||
qualcomm sd 415 | ||
qualcomm sd 617 firmware | ||
Qualcomm QCA617 | ||
qualcomm SD 625 firmware | ||
qualcomm SD 625 | ||
qualcomm sd 650 firmware | ||
qualcomm sd 650 | ||
qualcomm sd 652 firmware | ||
qualcomm sd 652 | ||
qualcomm SD 835 firmware | ||
qualcomm SD 835 | ||
qualcomm SD 800 firmware | ||
qualcomm SD 800 | ||
Android |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2017-14912 has been rated with a medium severity level due to the potential risk it poses to sensitive data.
CVE-2017-14912 affects various Qualcomm Snapdragon IoT and Mobile platforms including MDM9206, MDM9607, and several SD series models.
To fix CVE-2017-14912, users should update their affected devices to the latest software versions provided by Qualcomm and device manufacturers.
CVE-2017-14912 is associated with buffer attribute mismanagement issues in the Secure Display feature of affected devices.
There are no known effective workarounds for CVE-2017-14912; applying security updates is strongly recommended.