CVE-2017-18280: In Snapdragon (Automobile, Mobile, Wear) in version MDM9607, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD...

Security readout for executives and security teams

This Qualcomm Snapdragon issue can let one trusted application read data from an SPI/I2C hardware interface that another trusted application already opened. This may weaken confidentiality between trusted apps and attached devices on affected Snapdragon Automobile, Mobile, and Wear platforms. The public bundle does not provide CVSS, confirmed exploitation, or detailed remediation beyond vendor bulletin references. Exposure is most likely in devices using the listed Snapdragon Automobile, Mobile, or Wear platforms, including MDM9607, MSM8909W, MSM8996AU, SD 205 through SD 835, SDM429, SDM439, SDM632, and Snapdragon_High_Med_2016. Product-level impact depends on OEM firmware and security update status. Treat this as a firmware supply-chain exposure check rather than an emergency based on current evidence. Prioritize affected high-value or unsupported devices, especially where trusted applications may handle sensitive sensor, peripheral, or device data. Business urgency rises if an OEM cannot confirm patched firmware. Mitigation focus: Check Qualcomm and OEM security bulletins for CVE-2017-18280 guidance.; Apply OEM firmware or Android security updates that include the Qualcomm closed-source component fix.; Inventory devices using the affected Snapdragon platforms listed in the CVE..

Prepared

Jun 7, 2026, 05:35 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.