CVSS 3.0
7.8 highCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2017-18141
High (7.8) in qualcomm. EPSS 0.2% chance of exploitation in the next 30 days.
When a 3rd party TEE has been loaded it is possible for the non-secure world to create a secure monitor call which will give it access to privileged functions meant to only be accessible from the TEE in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions IPQ8074, MDM9206, MDM9607, MDM9635M, MDM9650, MDM9655, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SDA660, SDM439, SDM630, SDM660, SDX24, Snapdragon_High_Med_2016.
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 12% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- qualcomm:ipq8074_firmware
- qualcomm:mdm9206_firmware
- qualcomm:mdm9607_firmware
- qualcomm:mdm9635m_firmware
- qualcomm:mdm9650_firmware
- qualcomm:mdm9655_firmware
- qualcomm:msm8996au_firmware
- qualcomm:sd_205_firmware
- qualcomm:sd_210_firmware
- qualcomm:sd_212_firmware
- qualcomm:sd_410_firmware
- qualcomm:sd_412_firmware
- qualcomm:sd_425_firmware
- qualcomm:sd_427_firmware
- qualcomm:sd_429_firmware
- qualcomm:sd_430_firmware
- qualcomm:sd_435_firmware
- qualcomm:sd_439_firmware
- qualcomm:sd_450_firmware
- qualcomm:sd_625_firmware
- qualcomm:sd_632_firmware
- qualcomm:sd_636_firmware
- qualcomm:sd_650_firmware
- qualcomm:sd_652_firmware
- qualcomm:sd_810_firmware
- qualcomm:sd_820_firmware
- qualcomm:sd_820a_firmware
- qualcomm:sd_835_firmware
- qualcomm:sda660_firmware
- qualcomm:sdm439_firmware
- qualcomm:sdm630_firmware
- qualcomm:sdm660_firmware
- qualcomm:sdx24_firmware
- qualcomm:snapdragon_high_med_2016_firmware