Skip to content
OpenAdvisories
Unscored CVE-2017-18313 EUVD-2017-9439GHSA-rhv8-c8mx-v4h4

Under certain mode of operations, HLOS may be able get direct or indirect access through DXE channels to tamper with the authenticated WCNS…

Published Oct 23, 2018 · Updated Aug 5, 2024 · Assigned by qualcomm

Description

Under certain mode of operations, HLOS may be able get direct or indirect access through DXE channels to tamper with the authenticated WCNSS firmware stored in DDR because DXE-accessible memory is located within the authenticated image in Snapdragon Mobile and Snapdragon Wear in version MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 615/16/SD 415, SD 617.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon Mobile, Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 615/16/SD 415, SD 617 —

References