OpenCVE

Information disclosure possible while audio playback.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Qualcomm	Sd 450 Firmware Sd 625 Firmware Sd 820 Firmware Sd 820a Firmware Sd 835 Firmware Sd 845 Firmware Sd 850 Firmware

No data.

No data.

References

Link	Providers
https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2018-bulletin.html

History

Tue, 26 Nov 2024 15:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Qualcomm Qualcomm sd 450 Firmware Qualcomm sd 625 Firmware Qualcomm sd 820 Firmware Qualcomm sd 820a Firmware Qualcomm sd 835 Firmware Qualcomm sd 845 Firmware Qualcomm sd 850 Firmware
CPEs		cpe:2.3:o:qualcomm:sd_450_firmware:-:::::::* cpe:2.3:o:qualcomm:sd_625_firmware:-:::::::* cpe:2.3:o:qualcomm:sd_820_firmware:-:::::::* cpe:2.3:o:qualcomm:sd_820a_firmware:-:::::::* cpe:2.3:o:qualcomm:sd_835_firmware:-:::::::* cpe:2.3:o:qualcomm:sd_845_firmware:-:::::::* cpe:2.3:o:qualcomm:sd_850_firmware:-:::::::*
Vendors & Products		Qualcomm Qualcomm sd 450 Firmware Qualcomm sd 625 Firmware Qualcomm sd 820 Firmware Qualcomm sd 820a Firmware Qualcomm sd 835 Firmware Qualcomm sd 845 Firmware Qualcomm sd 850 Firmware
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Tue, 26 Nov 2024 14:15:00 +0000

Type	Values Removed	Values Added
Description		Information disclosure possible while audio playback.
Title		Information Exposure in Kernel
Weaknesses		CWE-200
References		https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2018-bulletin.html
Metrics		cvssV3_1 `{'score': 8.4, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}`

MITRE

Status: PUBLISHED

Assigner: qualcomm

Published: 2024-11-26T13:56:23.036Z

Updated: 2024-11-26T15:57:56.866Z

Reserved: 2018-06-15T00:00:00.000Z

Link: CVE-2017-18307

Vulnrichment

Updated: 2024-11-26T14:50:55.884Z

NVD

Status : Received

Published: 2024-11-26T14:15:17.573

Modified: 2024-11-26T14:15:17.573

Link: CVE-2017-18307

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2017-18307", "assignerOrgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", "state": "PUBLISHED", "assignerShortName": "qualcomm", "dateReserved": "2018-06-15T00:00:00.000Z", "datePublished": "2024-11-26T13:56:23.036Z", "dateUpdated": "2024-11-26T15:57:56.866Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "platforms": ["Snapdragon Mobile"], "product": "Snapdragon", "vendor": "Qualcomm, Inc.", "versions": [{"status": "affected", "version": "SD 450"}, {"status": "affected", "version": "SD 625"}, {"status": "affected", "version": "SD 820"}, {"status": "affected", "version": "SD 820A"}, {"status": "affected", "version": "SD 835"}, {"status": "affected", "version": "SD 845"}, {"status": "affected", "version": "SD 850"}]}], "descriptions": [{"lang": "en", "value": "Information disclosure possible while audio playback."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 8.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-200", "description": "CWE-200 Information Exposure", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", "shortName": "qualcomm", "dateUpdated": "2024-11-26T13:56:23.036Z"}, "references": [{"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2018-bulletin.html"}], "title": "Information Exposure in Kernel"}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2017-18307", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-11-26T14:50:43.209834Z"}}}], "affected": [{"cpes": ["cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "sd_450_firmware", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "sd_625_firmware", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "sd_820_firmware", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:sd_820a_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "sd_820a_firmware", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "sd_835_firmware", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "sd_845_firmware", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:sd_850_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "sd_850_firmware", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-26T15:57:56.866Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2017-18307", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-11-26T14:50:43.209834Z"}}}], "affected": [{"cpes": ["cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "sd_450_firmware", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "sd_625_firmware", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "sd_820_firmware", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:sd_820a_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "sd_820a_firmware", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "sd_835_firmware", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "sd_845_firmware", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:sd_850_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "sd_850_firmware", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-26T14:50:55.884Z"}}], "cna": {"title": "Information Exposure in Kernel", "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.4, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Qualcomm, Inc.", "product": "Snapdragon", "versions": [{"status": "affected", "version": "SD 450"}, {"status": "affected", "version": "SD 625"}, {"status": "affected", "version": "SD 820"}, {"status": "affected", "version": "SD 820A"}, {"status": "affected", "version": "SD 835"}, {"status": "affected", "version": "SD 845"}, {"status": "affected", "version": "SD 850"}], "platforms": ["Snapdragon Mobile"], "defaultStatus": "unaffected"}], "references": [{"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2018-bulletin.html"}], "descriptions": [{"lang": "en", "value": "Information disclosure possible while audio playback."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-200", "description": "CWE-200 Information Exposure"}]}], "providerMetadata": {"orgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", "shortName": "qualcomm", "dateUpdated": "2024-11-26T13:56:23.036Z"}}}, "cveMetadata": {"cveId": "CVE-2017-18307", "state": "PUBLISHED", "dateUpdated": "2024-11-26T15:57:56.866Z", "dateReserved": "2018-06-15T00:00:00.000Z", "assignerOrgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", "datePublished": "2024-11-26T13:56:23.036Z", "assignerShortName": "qualcomm"}, "dataVersion": "5.1"}