CVE-2015-9112 In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9625, SD 400, SD 800, SD 820, and SD 820A, lack of input validation in QSEE can....
CriticalCVSS 9.8
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9625, SD 400, SD 800, SD 820, and SD 820A, lack of input validation in QSEE can cause potential buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| qualcomm mdm9625 firmware | All versions | No fix listed |
| qualcomm sd 400 firmware | All versions | No fix listed |
| qualcomm sd 800 firmware | All versions | No fix listed |
| qualcomm sd 820a firmware | All versions | No fix listed |
| qualcomm sd 820 firmware | All versions | No fix listed |
| qualcomm Snapdragon Automobile, Snapdragon Mobile | = MDM9625, SD 400, SD 800, SD 820, SD 820A | No fix listed |
References
- 103671 third-party-advisory vdb-entry
- source.android.com vendor-advisory