Skip to content
Sign in
Not rated

CVE-2015-9166 In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and…

Description

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, and SD 850, DRM provisioning mechanisms used in QSEE applications have a feature to prevent further provisioning. This is done by creating an SFS file called 'finalize_prov_flag.data' at the end of provisioning. When this feature is enabled, provisioning calls check for the existence of the file in order to decide whether to do provisioning or not. Current implementation allows provisioning without sufficient checks.

Affected products and versions

Product Affected versions Fixed in
Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Versions not published

Other CVEs of Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear

The 123 CVEs of Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear →
CVE-2018-5867 Lack of checking input size can lead to buffer overflow In WideVine in snapdragon automobile, snapdragon mobile and… Not rated CVE-2017-18331 Improper access control on secure display buffers in snapdragon automobile, snapdragon mobile and snapdragon wear in… Not rated CVE-2018-11279 Lack of check of input size can make device memory get corrupted because of buffer overflow in snapdragon automobile,… Not rated CVE-2018-5915 Exception in Modem IP stack while processing IPv6 packet in snapdragon automobile, snapdragon mobile and snapdragon wear… Not rated
Track this CVE