CVE-2017-18125: Input Validation

First published: Mon Apr 02 2018(Updated: )

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 835, SD 845, SD 850, when secure camera is activated it stores captured data in protected buffers. The TEE application which uses secure camera expects those buffers to contain data captured during the current camera session. It is possible though for HLOS to put aside and reuse one or more of the protected buffers with previously captured data during next camera session. Such data reuse must be prevented as the TEE applications expects to receive valid data captured during the current session only.

Credit: product-security@qualcomm.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/nvd-index
• agent/references
• agent/type
• agent/softwarecombine
• agent/first-publish-date
• agent/severity
• agent/author
• agent/weakness
• agent/description
• agent/event
• agent/tags
• collector/android-source
• source/Android
• agent/software-canonical-lookup
• agent/last-modified-date
• collector/mitre-cve
• source/MITRE
• vendor/qualcomm
• canonical/qualcomm mdm9206 firmware
• canonical/qualcomm mdm9206
• canonical/google android
• canonical/qualcomm mdm9607
• canonical/qualcomm mdm9650 firmware
• canonical/qualcomm mdm9650
• canonical/qualcomm sd 210 firmware
• canonical/qualcomm sd 210
• canonical/qualcomm sd 212 firmware
• canonical/qualcomm sd 212
• canonical/qualcomm sd 205 firmware
• canonical/qualcomm sd 205
• canonical/qualcomm sd 835 firmware
• canonical/qualcomm sd 835
• canonical/qualcomm sd 845 firmware
• canonical/qualcomm sd 845
• canonical/qualcomm sd 850 firmware
• canonical/qualcomm sd 850
• vendor/google