CVE-2015-9114

N/A

Description

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, and SD 820A, lack of address argument validation in qsee_query_counter syscall could lead to untrusted pointer dereference.

CVE Details

CVSS v3.1 ScoreN/A

Published4/18/2018

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

qualcomm:sd_425qualcomm:sd_425_firmwarequalcomm:sd_430qualcomm:sd_430_firmwarequalcomm:sd_450qualcomm:sd_450_firmwarequalcomm:sd_625qualcomm:sd_625_firmwarequalcomm:sd_650qualcomm:sd_650_firmwarequalcomm:sd_652qualcomm:sd_652_firmwarequalcomm:sd_820qualcomm:sd_820_firmwarequalcomm:sd_820aqualcomm:sd_820a_firmware

Weaknesses (CWE)

CWE-476

References

http://www.securityfocus.com/bid/103671(product-security@qualcomm.com)

https://source.android.com/security/bulletin/2018-04-01(product-security@qualcomm.com)

http://www.securityfocus.com/bid/103671(af854a3a-2127-422b-91ae-364da2661108)

https://source.android.com/security/bulletin/2018-04-01(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.