{"id":"CVE-2017-18305","state":"PUBLISHED","title":"XBL sec mem dump system call allows complete control of EL3 by unlocking all XPUs if enable fuse is not blown in Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM","description":"XBL sec mem dump system call allows complete control of EL3 by unlocking all XPUs if enable fuse is not blown in Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 835.","publishedAt":"2018-10-23T13:00:00.000Z","updatedAt":"2024-08-05T21:20:50.932Z","severity":null,"assigner":"qualcomm","products":["Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear"],"affected":[{"vendor":"Qualcomm, Inc.","product":"Snapdragon Mobile, Snapdragon Wear","versions":[{"version":"MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 835","status":"affected"}]}],"references":["https://www.qualcomm.com/company/product-security/bulletins","http://www.securitytracker.com/id/1041432","https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components"],"weaknesses":[],"ingestedAt":"2026-10-29T19:43:31.374Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2017/18xxx/CVE-2017-18305.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2017-18305","state":"PUBLISHED","datePublished":"2018-10-23T13:00:00.000Z","dateUpdated":"2024-08-05T21:20:50.932Z","assignerShortName":"qualcomm","assignerOrgId":"2cfc7d3e-20d3-47ac-8db7-1b7285aff15f","dateReserved":"2018-06-15T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"XBL sec mem dump system call allows complete control of EL3 by unlocking all XPUs if enable fuse is not blown in Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 835."}],"affected":[{"vendor":"Qualcomm, Inc.","product":"Snapdragon Mobile, Snapdragon Wear","versions":[{"version":"MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 835","status":"affected"}]}],"references":[{"url":"https://www.qualcomm.com/company/product-security/bulletins","tags":["x_refsource_CONFIRM"]},{"url":"http://www.securitytracker.com/id/1041432","name":"1041432","tags":["vdb-entry","x_refsource_SECTRACK"]},{"url":"https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components","tags":["x_refsource_CONFIRM"]}],"problemTypes":[{"descriptions":[{"description":"Improper Access Control in Core","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"qualcomm","dateUpdated":"2018-10-24T09:57:01.000Z","orgId":"2cfc7d3e-20d3-47ac-8db7-1b7285aff15f"},"datePublic":"2018-08-06T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"product-security@qualcomm.com","ID":"CVE-2017-18305","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Snapdragon Mobile, Snapdragon Wear","version":{"version_data":[{"version_value":"MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 835"}]}}]},"vendor_name":"Qualcomm, Inc."}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"XBL sec mem dump system call allows complete control of EL3 by unlocking all XPUs if enable fuse is not blown in Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 835."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Improper Access Control in Core"}]}]},"references":{"reference_data":[{"name":"https://www.qualcomm.com/company/product-security/bulletins","refsource":"CONFIRM","url":"https://www.qualcomm.com/company/product-security/bulletins"},{"name":"1041432","refsource":"SECTRACK","url":"http://www.securitytracker.com/id/1041432"},{"name":"https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components","refsource":"CONFIRM","url":"https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.qualcomm.com/company/product-security/bulletins","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.securitytracker.com/id/1041432","name":"1041432","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components","tags":["x_refsource_CONFIRM","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-05T21:20:50.932Z"}}]}}}