CVEvulnerability
CVE-2017-13218
4.7 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2018-01-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 4.7 MEDIUM — CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 4.7 MEDIUM — AV:L/AC:M/Au:N/C:C/I:N/A:N
- Weaknesses
- CWE-200
Description
Access to CNTVCT_EL0 in Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear could be used for side channel attacks and this could lead to local information disclosure with no additional execution privileges needed in FSM9055, IPQ4019, IPQ8064, MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MSM8909W, QCA4531, QCA9980, QCN5502, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845.
Affected configurations
• google android
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html www.oracle.com
- http://www.securityfocus.com/bid/102390 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1040106 Third Party Advisory, VDB Entry
- https://source.android.com/security/bulletin/2018-01-01 Vendor Advisory
- https://www.codeaurora.org/security-bulletin/2018/06/04/june-2018-code-aurora-security-bulletin www.codeaurora.org
- http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html www.oracle.com
- http://www.securityfocus.com/bid/102390 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1040106 Third Party Advisory, VDB Entry
- https://source.android.com/security/bulletin/2018-01-01 Vendor Advisory
- https://www.codeaurora.org/security-bulletin/2018/06/04/june-2018-code-aurora-security-bulletin www.codeaurora.org