CVE-2017-18292

5.5 mediumEPSS 0.3%

Medium (5.5) in qualcomm. EPSS 0.3% chance of exploitation in the next 30 days.

Secure app running in non secure space can restart TZ by calling Widevine app API repeatedly in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 810, SD 820, SD 820A.

Severity

CVSS 3.0

5.5 medium

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 16% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2018-10-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

qualcomm:msm8909w_firmware
qualcomm:msm8996au_firmware
qualcomm:sd_205_firmware
qualcomm:sd_210_firmware
qualcomm:sd_212_firmware
qualcomm:sd_410_firmware
qualcomm:sd_412_firmware
qualcomm:sd_415_firmware
qualcomm:sd_425_firmware
qualcomm:sd_430_firmware
qualcomm:sd_450_firmware
qualcomm:sd_615_firmware
qualcomm:sd_616_firmware
qualcomm:sd_617_firmware
qualcomm:sd_625_firmware
qualcomm:sd_650_firmware
qualcomm:sd_652_firmware
qualcomm:sd_800_firmware
qualcomm:sd_810_firmware
qualcomm:sd_820_firmware
qualcomm:sd_820a_firmware

References

Check your stack JSON