Skip to content

CVE-2015-9207 In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, SD 617, SD 650/52, S...

CriticalCVSS 9.8 EPSS 1.2%
Published
Updated
Exploit status
No public exploit known

Description

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, SD 617, SD 650/52, SD 800, SD 808, and SD 810, lack of input validation in playready_getadditional_responsedata could lead to a buffer overread.

Affected products

ProductAffected versionsFixed in
qualcomm msm8909w firmware All versions No fix listed
qualcomm sd 210 firmware All versions No fix listed
qualcomm sd 212 firmware All versions No fix listed
qualcomm sd 205 firmware All versions No fix listed
qualcomm sd 400 firmware All versions No fix listed
qualcomm sd 410 firmware All versions No fix listed
qualcomm sd 412 firmware All versions No fix listed
qualcomm sd 615 firmware All versions No fix listed
qualcomm sd 616 firmware All versions No fix listed
qualcomm sd 415 firmware All versions No fix listed
qualcomm sd 617 firmware All versions No fix listed
qualcomm sd 650 firmware All versions No fix listed
qualcomm sd 652 firmware All versions No fix listed
qualcomm sd 800 firmware All versions No fix listed
qualcomm sd 808 firmware All versions No fix listed
qualcomm sd 810 firmware All versions No fix listed
qualcomm Snapdragon Mobile, Snapdragon Wear = MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, SD 617, SD 650/52, SD 800, SD 808, SD 810 No fix listed

References