CVE-2017-18313

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Mobile and Snapdragon Wear versions MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 615/16/SD 415, SD 617

Description: The issue allows HLOS to potentially access and tamper with authenticated WCNSS firmware stored in DDR through DXE channels under certain conditions. This is because DXE-accessible memory is located within the authenticated image.

Recommendations: For Qualcomm Snapdragon Mobile and Snapdragon Wear versions MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 615/16/SD 415, SD 617, consider restricting access to DXE channels as a temporary workaround until a patch is available.