First published: Mon Dec 03 2018(Updated: )
Improper access control on secure display buffers in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 820, SD 820A, SD 835, SDA660
Credit: product-security@qualcomm.com
Affected Software | Affected Version | How to fix |
---|---|---|
Google Android | ||
Qualcomm MDM9206 firmware | ||
Qualcomm MDM9206 | ||
Qualcomm MDM9607 firmware | ||
Qualcomm MDM9607 | ||
Qualcomm MDM9650 firmware | ||
Qualcomm MDM9650 | ||
Qualcomm MSM8996AU Firmware | ||
Qualcomm MSM8996AU Firmware | ||
qualcomm SD 210 firmware | ||
qualcomm SD 210 | ||
qualcomm SD 212 firmware | ||
qualcomm SD 212 | ||
qualcomm SD 205 firmware | ||
qualcomm SD 205 | ||
qualcomm SD 820 firmware | ||
qualcomm SD 820 | ||
qualcomm SD 820A firmware | ||
qualcomm SD 820A | ||
qualcomm SD 835 firmware | ||
qualcomm SD 835 | ||
qualcomm SDA660 firmware | ||
qualcomm SDA660 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2017-18331 has been rated as high severity due to improper access control vulnerabilities affecting sensitive display buffer functions.
To fix CVE-2017-18331, ensure that your device firmware is updated to the latest version provided by Qualcomm.
CVE-2017-18331 affects various Qualcomm Snapdragon models including MDM9206, MDM9607, and SD 820 among others.
CVE-2017-18331 is caused by improper access control mechanisms on secure display buffers used in Qualcomm Snapdragon products.
CVE-2017-18331 could potentially be exploited locally through malicious applications that can gain unauthorized access to display buffers.