OpenCVE

Information disclosure due to uninitialized variable.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Qualcomm	Sd 450 Firmware Sd 625 Firmware Sd 820 Firmware Sd 820a Firmware Sd 835 Firmware Sd 845 Firmware Sd 850 Firmware

No data.

No data.

References

Link	Providers
https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2018-bulletin.html

History

Tue, 26 Nov 2024 16:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Qualcomm Qualcomm sd 450 Firmware Qualcomm sd 625 Firmware Qualcomm sd 820 Firmware Qualcomm sd 820a Firmware Qualcomm sd 835 Firmware Qualcomm sd 845 Firmware Qualcomm sd 850 Firmware
CPEs		cpe:2.3:o:qualcomm:sd_450_firmware:-:::::::* cpe:2.3:o:qualcomm:sd_625_firmware:-:::::::* cpe:2.3:o:qualcomm:sd_820_firmware:-:::::::* cpe:2.3:o:qualcomm:sd_820a_firmware:-:::::::* cpe:2.3:o:qualcomm:sd_835_firmware:-:::::::* cpe:2.3:o:qualcomm:sd_845_firmware:-:::::::* cpe:2.3:o:qualcomm:sd_850_firmware:-:::::::*
Vendors & Products		Qualcomm Qualcomm sd 450 Firmware Qualcomm sd 625 Firmware Qualcomm sd 820 Firmware Qualcomm sd 820a Firmware Qualcomm sd 835 Firmware Qualcomm sd 845 Firmware Qualcomm sd 850 Firmware
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Tue, 26 Nov 2024 14:15:00 +0000

Type	Values Removed	Values Added
Description		Information disclosure due to uninitialized variable.
Title		Information Exposure in Camera Driver
Weaknesses		CWE-200
References		https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2018-bulletin.html
Metrics		cvssV3_1 `{'score': 8.4, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}`

MITRE

Status: PUBLISHED

Assigner: qualcomm

Published: 2024-11-26T13:56:21.839Z

Updated: 2024-11-26T15:57:56.603Z

Reserved: 2018-06-15T00:00:00.000Z

Link: CVE-2017-18306

Vulnrichment

Updated: 2024-11-26T14:49:04.173Z

NVD

Status : Received

Published: 2024-11-26T14:15:17.430

Modified: 2024-11-26T14:15:17.430

Link: CVE-2017-18306

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2017-18306", "assignerOrgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", "state": "PUBLISHED", "assignerShortName": "qualcomm", "dateReserved": "2018-06-15T00:00:00.000Z", "datePublished": "2024-11-26T13:56:21.839Z", "dateUpdated": "2024-11-26T15:57:56.603Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "platforms": ["Snapdragon Mobile"], "product": "Snapdragon", "vendor": "Qualcomm, Inc.", "versions": [{"status": "affected", "version": "SD 450"}, {"status": "affected", "version": "SD 625"}, {"status": "affected", "version": "SD 820"}, {"status": "affected", "version": "SD 820A"}, {"status": "affected", "version": "SD 835"}, {"status": "affected", "version": "SD 845"}, {"status": "affected", "version": "SD 850"}]}], "descriptions": [{"lang": "en", "value": "Information disclosure due to uninitialized variable."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 8.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-200", "description": "CWE-200 Information Exposure", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", "shortName": "qualcomm", "dateUpdated": "2024-11-26T13:56:21.839Z"}, "references": [{"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2018-bulletin.html"}], "title": "Information Exposure in Camera Driver"}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2017-18306", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-11-26T14:49:22.404324Z"}}}], "affected": [{"cpes": ["cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "sd_450_firmware", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "sd_625_firmware", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "sd_820_firmware", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:sd_820a_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "sd_820a_firmware", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "sd_835_firmware", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "sd_845_firmware", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:sd_850_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "sd_850_firmware", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-26T15:57:56.603Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2017-18306", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-11-26T14:49:22.404324Z"}}}], "affected": [{"cpes": ["cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "sd_450_firmware", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "sd_625_firmware", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "sd_820_firmware", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:sd_820a_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "sd_820a_firmware", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "sd_835_firmware", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "sd_845_firmware", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:sd_850_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "sd_850_firmware", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-26T14:49:04.173Z"}}], "cna": {"title": "Information Exposure in Camera Driver", "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.4, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Qualcomm, Inc.", "product": "Snapdragon", "versions": [{"status": "affected", "version": "SD 450"}, {"status": "affected", "version": "SD 625"}, {"status": "affected", "version": "SD 820"}, {"status": "affected", "version": "SD 820A"}, {"status": "affected", "version": "SD 835"}, {"status": "affected", "version": "SD 845"}, {"status": "affected", "version": "SD 850"}], "platforms": ["Snapdragon Mobile"], "defaultStatus": "unaffected"}], "references": [{"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2018-bulletin.html"}], "descriptions": [{"lang": "en", "value": "Information disclosure due to uninitialized variable."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-200", "description": "CWE-200 Information Exposure"}]}], "providerMetadata": {"orgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", "shortName": "qualcomm", "dateUpdated": "2024-11-26T13:56:21.839Z"}}}, "cveMetadata": {"cveId": "CVE-2017-18306", "state": "PUBLISHED", "dateUpdated": "2024-11-26T15:57:56.603Z", "dateReserved": "2018-06-15T00:00:00.000Z", "assignerOrgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", "datePublished": "2024-11-26T13:56:21.839Z", "assignerShortName": "qualcomm"}, "dataVersion": "5.1"}