vulnwire
5.5med

CVE-2017-18300

Secure display content could be accessed by third party trusted application after creating a fault in other trusted applications in Snapdra…

Published 8 y ago · modified 4 mo ago · JSON

CVSS
5.5
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.2%
percentile 16%
Public exploits
0
none known

Secure display content could be accessed by third party trusted application after creating a fault in other trusted applications in Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 835, SDA660.

Exploit prediction (EPSS)

0.25% probability of exploitation in the next 30 days, higher than 16% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD3.05.5CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
NVD2.04.9AV:L/AC:L/Au:N/C:C/I:N/A:N

Affected products

  • Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear

Classification

Weakness
  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

References

  • qualcomm.com /company/product-security/bulletins · x_refsource_CONFIRM, x_transferred
  • securitytracker.com /id/1041432 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • source.android.com /security/bulletin/2018-08-01#qualcomm-closed-source-components · x_refsource_CONFIRM, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.