First published: Mon Dec 03 2018(Updated: )
Information leak in UIM API debug messages in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 800, SD 810, SD 820, SD 835, Snapdragon_High_Med_2016.
Credit: product-security@qualcomm.com
Affected Software | Affected Version | How to fix |
---|---|---|
Qualcomm MDM9206 firmware | ||
Qualcomm MDM9206 | ||
Qualcomm MDM9607 firmware | ||
Qualcomm MDM9607 | ||
Qualcomm MDM9615 firmware | ||
Qualcomm MDM9615 | ||
Qualcomm MDM9625 firmware | ||
Qualcomm MDM9625 | ||
Qualcomm MDM9635M firmware | ||
Qualcomm MDM9635M | ||
qualcomm mdm9645 firmware | ||
qualcomm mdm9645 | ||
Qualcomm MDM9650 firmware | ||
Qualcomm MDM9650 | ||
Qualcomm MDM9655 firmware | ||
Qualcomm MDM9655 | ||
Qualcomm MSM8909W | ||
Qualcomm MSM8909W | ||
qualcomm SD 210 firmware | ||
qualcomm SD 210 | ||
qualcomm SD 212 firmware | ||
qualcomm SD 212 | ||
qualcomm SD 205 firmware | ||
qualcomm SD 205 | ||
qualcomm sd 410 firmware | ||
qualcomm sd 410 | ||
qualcomm sd 412 firmware | ||
qualcomm sd 412 | ||
qualcomm SD 425 firmware | ||
qualcomm SD 425 | ||
Qualcomm SD 427 firmware | ||
Qualcomm SD 427 | ||
Qualcomm SD 430 firmware | ||
Qualcomm SD 430 | ||
Qualcomm SD 435 firmware | ||
Qualcomm SD 435 | ||
Qualcomm SD 450 firmware | ||
Qualcomm SD 450 | ||
qualcomm sd 615 firmware | ||
qualcomm sd 615 | ||
qualcomm sd 616 firmware | ||
qualcomm sd 616 | ||
qualcomm sd 415 firmware | ||
qualcomm sd 415 | ||
qualcomm SD 625 firmware | ||
qualcomm SD 625 | ||
qualcomm sd 650 firmware | ||
qualcomm sd 650 | ||
qualcomm sd 652 firmware | ||
qualcomm sd 652 | ||
qualcomm SD 800 firmware | ||
qualcomm SD 800 | ||
qualcomm sd 810 firmware | ||
qualcomm sd 810 | ||
qualcomm SD 820 firmware | ||
qualcomm SD 820 | ||
qualcomm SD 835 firmware | ||
qualcomm SD 835 | ||
Qualcomm Snapdragon High Med 2016 Firmware | ||
Qualcomm Snapdragon High Med 2016 | ||
Android |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2017-18319 is an information leak vulnerability in the UIM API debug messages in Snapdragon mobile and Snapdragon wear devices.
CVE-2017-18319 affects Snapdragon mobile and Snapdragon wear devices with the following software versions: MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 800, SD 810, SD 820, SD 835, and Snapdragon High Med 2016.
CVE-2017-18319 has a severity rating of 5.5 (Moderate).
To fix CVE-2017-18319, it is recommended to apply the relevant security patches provided by Qualcomm or device manufacturers.
You can find more information about CVE-2017-18319 in the official Android Security Bulletin for December 2018, as well as on the SecurityFocus website.