Vulnerability

CVE-2017-13218

Component: WIFI
Location: OS
Access to CNTVCT_EL0 in Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear could be used for side channel attacks and this could lead to local information disclosure with no additional execution privileges needed in FSM9055, IPQ4019, IPQ8064, MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MSM8909W, QCA4531, QCA9980, QCN5502, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845.

Impact

Severity (Manufact.)

N/A

Severity (NIST)

4.7

Severity (Android)

N/A

Chipsets

21

Devices

1172

Affected Hardware

NameAlso known asManufacturer
MSM8909
Snapdragon 210
Qualcomm
MSM8909AA
Snapdragon 212
Qualcomm
MSM8916
Snapdragon 410
Qualcomm
MSM8929
Snapdragon 415
Qualcomm
MSM8917
Snapdragon 425
Qualcomm
MSM8937
Snapdragon 430
Qualcomm
SDM450
Snapdragon 450
Qualcomm
MSM8939
Snapdragon 615
Qualcomm
MSM8952
Snapdragon 617
Qualcomm
MSM8953
Snapdragon 625
Qualcomm
21 of 21 row(s) shown.

Rows per page

Page 1 of 3

Timeline

Introduced (est):
Jan 1, 2014
Reported:
Jul 28, 2017
Advisory Published:
Jul 26, 2018
CVE Published:
Jan 12, 2018
Android Patch Level:
None
For more information and a detailed analysis of the data presented on this website, please see our paper, to be presented at NDSS'25.
Follow us on Twitter