CVE-2017-18302: In Snapdragon (Automobile ,Mobile) in version MSM8996AU, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD...

Security readout for executives and security teams

This flaw affects listed Qualcomm Snapdragon automotive and mobile platforms. A malicious high-level OS client could abuse a check/use timing gap to alter memory shared with a QSEE trusted application, potentially causing arbitrary writes into TrustZone kernel memory. That makes compromised or unpatched devices materially higher risk. Exposure is limited to devices using the listed Qualcomm Snapdragon Automobile or Mobile platforms and firmware containing the vulnerable Qualcomm closed-source component. Asset owners must map device models to chipsets and OEM firmware levels because the CVE sources do not identify every affected end product. Treat this as high priority where affected Snapdragon devices are still in service, especially automotive, enterprise mobile, or embedded fleets. The issue targets trusted execution memory, but public evidence in the bundle does not show active exploitation. Mitigation focus: Check Qualcomm, Android, and OEM advisories for CVE-2017-18302 guidance.; Apply OEM firmware updates that incorporate the relevant Qualcomm closed-source component fixes.; Prioritize affected automotive, managed mobile, and long-lived embedded devices..

Prepared

Jun 7, 2026, 05:35 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.