CVE-2017-18143 — HIGH (7.5)

Vulnerability Description

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile SD 845, SD 850, on a secure device, PD dumps are collected when debugging is not enabled.

CVSS Score

7.5

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

NONE

Availability

NONE

Affected Products

Vendor	Product	Versions
Qualcomm	Sd 845 Firmware	-
Qualcomm	Sd 845	-
Qualcomm	Sd 850 Firmware	-
Qualcomm	Sd 850	-

References

http://www.securityfocus.com/bid/103671Third Party AdvisoryVDB Entry
https://source.android.com/security/bulletin/2018-04-01Vendor Advisory
http://www.securityfocus.com/bid/103671Third Party AdvisoryVDB Entry
https://source.android.com/security/bulletin/2018-04-01Vendor Advisory

FAQ

What is CVE-2017-18143?

CVE-2017-18143 is a vulnerability with a CVSS score of 7.5 (HIGH). In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile SD 845, SD 850, on a secure device, PD dumps are collected when debugging is not enabled.

How severe is CVE-2017-18143?

CVE-2017-18143 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2017-18143?

Check the references section above for vendor advisories and patch information. Affected products include: Qualcomm Sd 845 Firmware, Qualcomm Sd 845, Qualcomm Sd 850 Firmware, Qualcomm Sd 850.