CVE-2017-14911

In Android before 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile, Snapdragon Automobile APQ8096AU, MDM9206, MDM9650, MSM8996AU, SD 210/SD 212/SD 205…

published March 30, 2018

CVSS
—
EPSS
2%
Percentile
82.5
In the wild
Unconfirmed
What it is

⚠️ A sneaky oversight in the XBL loader could let unauthorized changes slip right past the guard! Think of it like a hotel check-in desk that forgets to verify your ID — you could walk in and make changes to your room without anyone batting an eye! If exploited, an attacker could manipulate device configurations without proper authentication, leading to unauthorized access or control. This could compromise the integrity of devices running on affected Qualcomm Snapdragon platforms, creating a potential security nightmare.

Put simply

Think of it like a hotel check-in desk that forgets to verify your ID — you could walk in and make changes to your room without anyone batting an eye! This vulnerability allows the XBL loader on various Qualcomm Snapdragon chips to bypass authentication checks when loading device configurations, which is a significant hole in its security measures.

What to do

If exploited, an attacker could manipulate device configurations without proper authentication, leading to unauthorized access or control. This could compromise the integrity of devices running on affected Qualcomm Snapdragon platforms, creating a potential security nightmare. To mitigate this issue, ensure that your device firmware is updated to include the latest patches from Qualcomm released after January 5, 2018. Regularly check for firmware updates from your device manufacturer to maintain the highest security standards. You've got this! Stay proactive and patch up to secure your devices! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02218 · 82.5th percentile
Published
2018-03-30T15:00Z
EPSS history
Timeline
  • 30 MAR 15:00Z
    In Android before 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile, Snapdragon Automobile APQ8096AU, MDM9206, MDM9650, MSM8996AU, SD 210/SD 212/SD 205…
    cvelistv5