CVE-2017-18128 : Security Advisory and Response

Android devices running on Qualcomm Snapdragon Mobile SD 845 and SD 850 chips with a security patch level prior to 2018-04-05 are affected by a security vulnerability related to improper access control in the Memory Protection Unit (MPU).

Understanding CVE-2017-18128

A potential security vulnerability in Android devices using Qualcomm Snapdragon Mobile SD 845 and SD 850 chips.

What is CVE-2017-18128?

This CVE identifies a flaw in the configuration of the Memory Protection Unit (MPU) on Qualcomm Snapdragon Mobile chips, potentially leading to the exposure of sensitive data.

The Impact of CVE-2017-18128

The vulnerability could result in the exposure of protected data due to improper access control in the MPU configuration.

Technical Details of CVE-2017-18128

Android devices using Qualcomm Snapdragon Mobile SD 845 and SD 850 chips are affected by this vulnerability.

Vulnerability Description

Improper access control in the MPU configuration may expose secured data on affected devices.

Affected Systems and Versions

Product: Snapdragon Mobile
Vendor: Qualcomm, Inc.
Versions: SD 845, SD 850

Exploitation Mechanism

The flaw arises from improper access control when configuring the Memory Protection Unit (MPU) on the affected chips.

Mitigation and Prevention

Steps to address and prevent the CVE-2017-18128 vulnerability.

Immediate Steps to Take

Update devices to the security patch level released after 2018-04-05.
Monitor for any unusual activities indicating potential data exposure.

Long-Term Security Practices

Regularly update devices with the latest security patches.
Implement access control measures to prevent unauthorized data exposure.

Patching and Updates

Ensure all devices are updated with the latest security patches to mitigate the vulnerability.