CVE-2017-8252 — Vulnetix

CVE-2017-8252 PUBLISHED CVSS 5.5 MEDIUM

Kernel can inject faults in computations during the execution of TrustZone leading to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ8074, MDM9150, MDM9206, MDM9607, MDM9615, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU, QCA8081, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24, SM7150, Snapdragon_High_Med_2016, SXR1130

EPSS 0.04% · 12.3th percentile

Risk Scores

CVSS 3.0

5.5

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS Score

0.04%

12.3th percentile

Affected Products

Vendor	Product	Versions
qualcomm	sd_439_firmware
qualcomm	ipq4019_firmware
qualcomm	qc_215_firmware
qualcomm	sdm660_firmware
qualcomm	sd_820_firmware
qualcomm	sd_410_firmware
qualcomm	sd_850_firmware
qualcomm	sd_636_firmware
qualcomm	ipq8074_firmware
qualcomm	sd_412_firmware
qualcomm	sd_415_firmware
qualcomm	mdm9650_firmware
qualcomm	sd_205_firmware
Qualcomm, Inc.	Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking	IPQ4019, IPQ8074, MDM9150, MDM9206, MDM9607, MDM9615, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU, QCA8081, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24, SM7150, Snapdragon_High_Med_2016, SXR1130
qualcomm	sd_212_firmware
qualcomm	sd_835_firmware
qualcomm	sd_435_firmware
qualcomm	sd_845_firmware
qualcomm	sd_652_firmware
qualcomm	sd_616_firmware

…and 36 more

Exploit Intelligence

CIRCL seen: CVE-2017-8252 (circl-sighting)
https://www.qualcomm.com/company/product-security/bulletins (circl)

Timeline

Apr 27, 2017 CVE Published
Jun 14, 2019 PoC Published
Apr 14, 2021 EPSS Score
Jun 23, 2021 EPSS Score
Aug 24, 2021 EPSS Score
Oct 26, 2021 EPSS Score
Dec 27, 2021 EPSS Score
Feb 28, 2022 EPSS Score
May 2, 2022 EPSS Score
Jul 3, 2022 EPSS Score
Sep 5, 2022 EPSS Score
Nov 6, 2022 EPSS Score

References

Open in Interactive Console →