Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2015-9112

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9625, SD 400, SD 800, SD 820, and SD 820A, lack of input validation in QSEE can cause potential buffer overflow.

Published

2018-04-18T14:29:02.777

Last Modified

2024-11-21T02:39:49.647

Status

Modified

Source

[email protected]

Severity

CVSSv3.0: 9.8 (CRITICAL)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-119
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System qualcomm mdm9625_firmware - Yes
Hardware qualcomm mdm9625 - No
Operating System qualcomm sd_400_firmware - Yes
Hardware qualcomm sd_400 - No
Operating System qualcomm sd_800_firmware - Yes
Hardware qualcomm sd_800 - No
Operating System qualcomm sd_820a_firmware - Yes
Hardware qualcomm sd_820a - No
Operating System qualcomm sd_820_firmware - Yes
Hardware qualcomm sd_820 - No
References