CVEvulnerability

CVE-2015-9146

9.8 CRITICAL Published 2018-04-18 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-04-18
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-20

Description

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9625, MDM9635M, MDM9645, MDM9650, MDM9655, SD 400, SD 800, SD 835, SD 845, SD 850, and SDX20, when QDI read, write, or ioctl are called, the passed-in pointer is not properly validated before accessing it for the delayed response.

Affected configurations

• qualcomm mdm9625 firmware • qualcomm mdm9635m firmware • qualcomm mdm9650 firmware • qualcomm mdm9655 firmware • qualcomm sd 400 firmware • qualcomm sd 800 firmware • qualcomm sd 835 firmware • qualcomm sd 845 firmware • qualcomm sdx20 firmware • qualcomm sd 850 firmware

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References