What is the severity of CVE-2017-9711?

CVE-2017-9711 has a medium severity rating due to the potential for unprivileged processes to perform IOCTL calls.

How do I fix CVE-2017-9711?

To fix CVE-2017-9711, ensure that firmware updates from Qualcomm for the affected devices are applied to mitigate the vulnerability.

What types of devices are affected by CVE-2017-9711?

CVE-2017-9711 affects several Qualcomm firmware versions across different models, including MDM9206, MDM9607, and SD series chips.

What are IOCTL calls in relation to CVE-2017-9711?

IOCTL calls are input/output control calls that can be exploited by unprivileged processes, potentially allowing unauthorized access to system functions.

Are all Qualcomm devices vulnerable to CVE-2017-9711?

No, CVE-2017-9711 specifically affects certain Qualcomm firmware versions and does not apply to all Qualcomm devices.

Vulnerability/
CVE-2017-9711

high

7.8

CWE

264

22/11/2024

25/11/2024

CVE-2017-9711: Permissions, Privileges, and Access Controls in Data

First published: Fri Nov 22 2024(Updated: )

Certain unprivileged processes are able to perform IOCTL calls.

Credit: product-security@qualcomm.com

Affected Software	Affected Version	How to fix
All of
Qualcomm MDM9206 firmware
Qualcomm MDM9206
All of
Qualcomm MDM9607 firmware
Qualcomm MDM9607
All of
qualcomm mdm9640 firmware
qualcomm MDM9640
All of
Qualcomm MDM9650 firmware
Qualcomm MDM9650
All of
Qualcomm MSM8909W
Qualcomm MSM8909W
All of
qualcomm SD 210 firmware
qualcomm SD 210
All of
qualcomm SD 212 firmware
qualcomm SD 212
All of
qualcomm SD 205 firmware
qualcomm SD 205
All of
qualcomm SD 425 firmware
qualcomm SD 425
All of
Qualcomm SD 430 firmware
Qualcomm SD 430
All of
Qualcomm SD 450 firmware
Qualcomm SD 450
All of
qualcomm sd 615 firmware
qualcomm sd 615
All of
qualcomm sd 616 firmware
qualcomm sd 616
All of
qualcomm sd 415 firmware
qualcomm sd 415
All of
qualcomm sd 617 firmware
Qualcomm QCA617
All of
qualcomm SD 625 firmware
qualcomm SD 625
All of
qualcomm sd 650 firmware
qualcomm sd 650
All of
qualcomm sd 652 firmware
qualcomm sd 652
All of
qualcomm sd 810 firmware
qualcomm sd 810
All of
qualcomm SD 820 firmware
qualcomm SD 820
All of
qualcomm SD 820A firmware
qualcomm SD 820A
All of
qualcomm SD 835 firmware
qualcomm SD 835
All of
qualcomm SD 845 firmware
qualcomm SD 845

Never miss a vulnerability like this again

Reference Links

https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2018-bulletin.html

Frequently Asked Questions

What is the severity of CVE-2017-9711?
CVE-2017-9711 has a medium severity rating due to the potential for unprivileged processes to perform IOCTL calls.
How do I fix CVE-2017-9711?
To fix CVE-2017-9711, ensure that firmware updates from Qualcomm for the affected devices are applied to mitigate the vulnerability.
What types of devices are affected by CVE-2017-9711?
CVE-2017-9711 affects several Qualcomm firmware versions across different models, including MDM9206, MDM9607, and SD series chips.
What are IOCTL calls in relation to CVE-2017-9711?
IOCTL calls are input/output control calls that can be exploited by unprivileged processes, potentially allowing unauthorized access to system functions.
Are all Qualcomm devices vulnerable to CVE-2017-9711?
No, CVE-2017-9711 specifically affects certain Qualcomm firmware versions and does not apply to all Qualcomm devices.