CVE-2017-14912

In Android before 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile [VERSION]: MDM9206, MDM9607, MDM9650, MSM8909W, SD 200, SD 210/SD 212/SD 205, SD…

published March 30, 2018

CVSS
—
EPSS
2%
Percentile
76.4
In the wild
Unconfirmed
What it is

⚠️ A sneaky oversight in Secure Display could leave your buffers exposed! In Android versions before January 2018, some Qualcomm Snapdragon devices might just let their secrets slip. 🔍 Think of this like a restaurant that forgot to secure its back door. Anyone who knows the secret location can peek inside the kitchen and see all the recipes without ever making a reservation! If an attacker discovers this flaw, they could potentially access sensitive data being displayed, leading to unauthorized viewing of private information. While it’s not actively exploited, the implications could be mind-blowingly serious if left unaddressed.

Put simply

Think of this like a restaurant that forgot to secure its back door. Anyone who knows the secret location can peek inside the kitchen and see all the recipes without ever making a reservation! The vulnerability arises from improperly marked buffer attributes in Secure Display on affected Qualcomm Snapdragon devices. This oversight could allow unintended access to sensitive data.

What to do

If an attacker discovers this flaw, they could potentially access sensitive data being displayed, leading to unauthorized viewing of private information. While it’s not actively exploited, the implications could be mind-blowingly serious if left unaddressed. To mitigate this risk, ensure your Android devices are updated to versions released after January 5, 2018. Check for updates from your device manufacturer and consider disabling Secure Display if not in use. You've got this! Stay vigilant and keep your devices updated! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01657 · 76.4th percentile
Published
2018-03-30T15:00Z
EPSS history
Timeline
  • 30 MAR 15:00Z
    In Android before 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile [VERSION]: MDM9206, MDM9607, MDM9650, MSM8909W, SD 200, SD 210/SD 212/SD 205, SD…
    cvelistv5