CVE-2017-18129

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-04-11 · updated 2026-06-17
Weakness: CWE-668

Description

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9206, MDM9607, SD 845, MSM8996, MSM8998, it is possible for IPA (internet protocol accelerator) channels owned by one security domain to be controlled from other domains.

Affected products

Qualcomm Mdm9206 Firmware: all versions
Qualcomm Mdm9607 Firmware: all versions
Qualcomm Msm8996 Firmware: all versions
Qualcomm Msm8998 Firmware: all versions
Qualcomm Sd 845 Firmware: all versions

References

http://www.securityfocus.com/bid/103671
https://source.android.com/security/bulletin/2018-04-01
http://www.securityfocus.com/bid/103671
https://source.android.com/security/bulletin/2018-04-01

Get alerted when CVE-2017-18129 or the next vulnerability affects your stack