cve/2017/CVE-2017-18320.md

18 lines
972 B
Markdown
Raw Normal View History

2024-05-26 14:27:05 +02:00
### [CVE-2017-18320](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18320)
![](https://img.shields.io/static/v1?label=Product&message=Snapdragon%20Automobile%2C%20Snapdragon%20Mobile&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Improper%20Input%20Validation%20in%20TZ&color=brighgreen)
### Description
QSEE unload attempt on a 3rd party TEE without previously loading results in a data abort in snapdragon automobile and snapdragon mobile in versions MSM8996AU, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 712 / SD 710 / SD 670, SD 810, SD 820, SD 820A, SD 835, SDA660, SDM439, SDM630, SDM660, SDX24, Snapdragon_High_Med_2016, SXR1130.
### POC
#### Reference
- https://www.qualcomm.com/company/product-security/bulletins
#### Github
No PoCs found on GitHub currently.