CVE-2017-18129 In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9206, MDM9607, SD 845, MSM8996, MSM8998, it is possible for IPA (internet protocol accelera...
CriticalCVSS 9.8
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9206, MDM9607, SD 845, MSM8996, MSM8998, it is possible for IPA (internet protocol accelerator) channels owned by one security domain to be controlled from other domains.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| qualcomm mdm9206 firmware | All versions | No fix listed |
| qualcomm mdm9607 firmware | All versions | No fix listed |
| qualcomm msm8996 firmware | All versions | No fix listed |
| qualcomm msm8998 firmware | All versions | No fix listed |
| qualcomm sd 845 firmware | All versions | No fix listed |
| qualcomm Snapdragon Automobile, Snapdragon Mobile | = MDM9206, MDM9607, SD 845, MSM8996, MSM8998 | No fix listed |
References
- 103671 third-party-advisory vdb-entry
- source.android.com vendor-advisory