CVE-2015-9146 In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9625, MDM9635M, MDM9645, MDM9650, MDM9655, SD 400, SD 800, SD 835, SD 845, SD 850, and SDX20, when QDI rea...
CriticalCVSS 9.8
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9625, MDM9635M, MDM9645, MDM9650, MDM9655, SD 400, SD 800, SD 835, SD 845, SD 850, and SDX20, when QDI read, write, or ioctl are called, the passed-in pointer is not properly validated before accessing it for the delayed response.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| qualcomm mdm9625 firmware | All versions | No fix listed |
| qualcomm mdm9635m firmware | All versions | No fix listed |
| qualcomm mdm9650 firmware | All versions | No fix listed |
| qualcomm mdm9655 firmware | All versions | No fix listed |
| qualcomm sd 400 firmware | All versions | No fix listed |
| qualcomm sd 800 firmware | All versions | No fix listed |
| qualcomm sd 835 firmware | All versions | No fix listed |
| qualcomm sd 845 firmware | All versions | No fix listed |
| qualcomm sdx20 firmware | All versions | No fix listed |
| qualcomm sd 850 firmware | All versions | No fix listed |
| qualcomm Snapdragon Mobile | = MDM9625, MDM9635M, MDM9645, MDM9650, MDM9655, SD 400, SD 800, SD 835, SD 845, SD 850, SDX20 | No fix listed |
References
- 103671 third-party-advisory vdb-entry
- source.android.com vendor-advisory