What is CVE-2017-18141?

CVE-2017-18141 is a high-severity vulnerability in Qualcomm Ipq8074. CVSS score: 7.8/10. Published 2019-01-03.

How severe is CVE-2017-18141?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Qualcomm Ipq8074

CVE-2017-18141

When a 3rd party TEE has been loaded it is possible for the non-secure world to create a secure monitor call which will give it access to privileged functions meant to only be accessible from the TEE in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions IPQ8074, MDM9206, MDM9607, MDM9635M, MDM9650, MDM9655, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SDA660, SDM439, SDM630, SDM660, SDX24, Snapdragon_High_Med_2016.

EPSS: 0.002 (13.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

References

product-security@qualcomm.com (x_refsource_CONFIRM, Vendor Advisory)
product-security@qualcomm.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)

Frequently asked questions

What is CVE-2017-18141?: CVE-2017-18141 is a high-severity vulnerability in Qualcomm Ipq8074. CVSS score: 7.8/10. Published 2019-01-03.
How severe is CVE-2017-18141?: High severity. CVSS v3 base score is 7.8 out of 10.