CVE-2017-13218

Access to CNTVCT_EL0 in Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear could be used for side channel attacks and this could lead to local information disclosure with no additional execution privileges needed in FSM9055, IPQ4019, IPQ8064, MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MSM8909W, QCA4531, QCA9980, QCN5502, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845.

• CWE-200

• http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
• http://www.securityfocus.com/bid/102390Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040106Third Party Advisory, VDB Entry
• https://source.android.com/security/bulletin/2018-01-01Vendor Advisory
• https://www.codeaurora.org/security-bulletin/2018/06/04/june-2018-code-aurora-security-bulletin
• http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
• http://www.securityfocus.com/bid/102390Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040106Third Party Advisory, VDB Entry
• https://source.android.com/security/bulletin/2018-01-01Vendor Advisory
• https://www.codeaurora.org/security-bulletin/2018/06/04/june-2018-code-aurora-security-bulletin

Published

Jan 12, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-13212An elevation of privilege vulnerability in the Android syste…
• CVE-2017-13213An elevation of privilege vulnerability in the Broadcom bcmd…
• CVE-2017-13214In the hardware HEVC decoder, some media files could cause a…
• CVE-2017-13215A elevation of privilege vulnerability in the Upstream kerne…
• CVE-2017-13216In ashmem_ioctl of ashmem.c, there is an out-of-bounds write…
• CVE-2017-13217In DisplayFtmItem in the bootloader, there is an out-of-boun…
• CVE-2017-13219A denial of service vulnerability in the Upstream kernel syn…
• CVE-2017-1322IBM API Connect 5.0.6.0 is vulnerable to an XML External Ent…
• CVE-2017-13220An elevation of privilege vulnerability in the Upstream kern…
• CVE-2017-13221An elevation of privilege vulnerability in the Upstream kern…
• CVE-2017-13222An information disclosure vulnerability in the Upstream kern…
• CVE-2017-13225In libMtkOmxVdec.so there is a possible heap buffer overflow…