What’s Vulnerable › Vulnerabilities
CVE-2017-18125
- Severity: high (CVSS 7.5 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.6% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2018-04-11 · updated 2026-06-17
- Weakness: CWE-384
Description
In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 835, SD 845, SD 850, when secure camera is activated it stores captured data in protected buffers. The TEE application which uses secure camera expects those buffers to contain data captured during the current camera session. It is possible though for HLOS to put aside and reuse one or more of the protected buffers with previously captured data during next camera session. Such data reuse must be prevented as the TEE applications expects to receive valid data captured during the current session only.
Affected products
- Qualcomm Mdm9206 Firmware: all versions
- Qualcomm Mdm9607 Firmware: all versions
- Qualcomm Mdm9650 Firmware: all versions
- Qualcomm Sd 205 Firmware: all versions
- Qualcomm Sd 210 Firmware: all versions
- Qualcomm Sd 212 Firmware: all versions
- Qualcomm Sd 835 Firmware: all versions
- Qualcomm Sd 845 Firmware: all versions
- Qualcomm Sd 850 Firmware: all versions
References
- http://www.securityfocus.com/bid/103671
- https://source.android.com/security/bulletin/2018-04-01
- http://www.securityfocus.com/bid/103671
- https://source.android.com/security/bulletin/2018-04-01
Get alerted when CVE-2017-18125 or the next vulnerability affects your stack