{"id":"CVE-2017-18129","aliases":["EUVD-2017-9264","GHSA-qmr5-j3mj-vw67"],"status":"published","title":"In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile and...","description":"In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9206, MDM9607, SD 845, MSM8996, MSM8998, it is possible for IPA (internet protocol accelerator) channels owned by one security domain to be controlled from other domains.","severity":{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01252,"percentile":0.69622,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-668"],"published":"2018-04-11T15:00:00Z","modified":"2026-06-17T01:12:14Z","products":[{"vendor":"qualcomm","product":"mdm9206_firmware"},{"vendor":"qualcomm","product":"mdm9607_firmware"},{"vendor":"qualcomm","product":"msm8996_firmware"},{"vendor":"qualcomm","product":"msm8998_firmware"},{"vendor":"qualcomm","product":"sd_845_firmware"},{"vendor":"qualcomm, inc.","product":"snapdragon automobile, snapdragon mobile"}],"references":[{"url":"https://source.android.com/security/bulletin/2018-04-01","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/103671","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-18129"},{"url":"https://github.com/advisories/GHSA-qmr5-j3mj-vw67"}],"sources":{"cve":[{"id":"CVE-2017-18129","description":"In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9206, MDM9607, SD 845, MSM8996, MSM8998, it is possible for IPA (internet protocol accelerator) channels owned by one security domain to be controlled from other domains.","status":"published","published":"2018-04-11T15:00:00Z","modified":"2024-09-16T22:51:52.916Z","updated_at":"2026-11-02T14:33:22.064284Z"}],"euvd":[{"id":"EUVD-2017-9264","description":"In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9206, MDM9607, SD 845, MSM8996, MSM8998, it is possible for IPA (internet protocol accelerator) channels owned by one security domain to be controlled from other domains.","status":"published","published":"2018-04-11T15:00:00Z","modified":"2024-09-16T22:51:52Z","updated_at":"2026-11-03T00:54:59.221564Z"}],"ghsa":[{"id":"GHSA-qmr5-j3mj-vw67","title":"In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile and...","description":"In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9206, MDM9607, SD 845, MSM8996, MSM8998, it is possible for IPA (internet protocol accelerator) channels owned by one security domain to be controlled from other domains.","status":"published","published":"2022-05-13T01:44:34Z","modified":"2023-02-02T05:01:02Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-668"],"updated_at":"2026-11-02T14:51:05.943235Z"}],"nvd":[{"id":"CVE-2017-18129","description":"In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9206, MDM9607, SD 845, MSM8996, MSM8998, it is possible for IPA (internet protocol accelerator) channels owned by one security domain to be controlled from other domains.","status":"published","published":"2018-04-11T15:29:00.727Z","modified":"2026-06-17T01:12:14.803Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-668"],"updated_at":"2026-11-02T14:04:17.032862Z"}]}}