PT-2018-1174 · Qualcomm+1 · Sd 415+25

Published 2018-02-05 · Updated 2019-10-03 · CVE-2017-14910

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Qualcomm components in Android versions (affected versions not specified) Snapdragon Automobile versions (affected versions not specified) Snapdragon IoT versions (affected versions not specified) Snapdragon Mobile versions (affected versions not specified) MDM9206 versions (affected versions not specified) MDM9607 versions (affected versions not specified) MDM9650 versions (affected versions not specified) S820A versions (affected versions not specified) S820Am versions (affected versions not specified) SD 210/SD 212/SD 205 versions (affected versions not specified) SD 410/12 versions (affected versions not specified) SD 425 versions (affected versions not specified) SD 430 versions (affected versions not specified) SD 615/16/SD 415 versions (affected versions not specified) SD 617 versions (affected versions not specified) SD 625 versions (affected versions not specified) SD 650/52 versions (affected versions not specified) SD 820 versions (affected versions not specified) SD 835 versions (affected versions not specified) SD 845 versions (affected versions not specified)

Description The issue is related to a buffer overread in the Qualcomm Security Feature component of the Android operating system, which can be caused by reading beyond the boundaries of a buffer in memory. This can allow a remote attacker to cause a buffer overflow. In certain Snapdragon products, a buffer overread is possible if there are no newlines in an input file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Buffer Over-read

Weakness Enumeration

CWE-125

CWE-126

Related Identifiers

BDU:2018-00625

CVE-2017-14910

Affected Products

Android

Mdm9206

Mdm9607

Mdm9650

S820A

S820Am

Sd 205

Sd 210

Sd 212

Sd 410

Sd 412

Sd 415

Sd 425

Sd 430

Sd 615

Sd 616

Sd 617

Sd 625

Sd 650

Sd 652

Sd 820

Sd 835

Sd 845

Snapdragon Automobile

Snapdragon Iot

Snapdragon Mobile

References · 3

• https://bdu.fstec.ru/vul/2018-00625 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2017-14910 · Security Note
• https://source.android.com/security/bulletin/2018-02-01 · Note