CVE-2017-18129

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9206, MDM9607, SD 845, MSM8996, MSM8998, it is possible for IPA (internet protocol accelerator) channels owned by one security domain to be controlled from other domains.

Score

CVSS 3.0 9.8 Critical

Status

Modified - product-security@qualcomm.com

Published

2018-04-11

Last modified

2024-09-16

Weaknesses

CWE-668

Affected products

• Mdm9206 Firmware (Qualcomm)
• Mdm9607 Firmware (Qualcomm)
• Msm8996 Firmware (Qualcomm)
• Msm8998 Firmware (Qualcomm)
• Sd 845 Firmware (Qualcomm)
• Snapdragon Automobile (Qualcomm Inc.)
• Snapdragon Mobile (Qualcomm Inc.)

References

• http://www.securityfocus.com/bid/103671
• https://source.android.com/security/bulletin/2018-04-01