Improper Access Control in Qualcomm Snapdragon Products
CVE-2017-18331
7.8HIGH
Key Information:
- Vendor
- Qualcomm
- Vendor
- CVE Published:
- 18 January 2019
Summary
An improper access control vulnerability exists within Qualcomm's Snapdragon platforms, potentially exposing sensitive information stored in secure display buffers. This concern affects a range of versions across Snapdragon mobile, automotive, and wearable devices, leading to possible unauthorized access to critical data.
Affected Version(s)
Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 820, SD 820A, SD 835, SDA660
References
CVSS V3.1
Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved