Skip to content
Sign in
Not rated

CVE-2015-9185 In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and…

Description

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, and SD 850, in multiple Secure DEMUX functions (e.g., SDMX_open_session, SDMX_close_session, SDMX_set_session_cfg), when parameter validation fails, an error code is written into a response buffer, without checking that response buffer length (rsplen) passed from HLOS is large enough to hold the response. If the buffer is at the end of a non-secure page followed by secured memory page, this can cause a secure memory corruption.

Affected products and versions

Product Affected versions Fixed in
Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Versions not published

Other CVEs of Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear

The 123 CVEs of Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear →
CVE-2018-5867 Lack of checking input size can lead to buffer overflow In WideVine in snapdragon automobile, snapdragon mobile and… Not rated CVE-2017-18331 Improper access control on secure display buffers in snapdragon automobile, snapdragon mobile and snapdragon wear in… Not rated CVE-2018-11279 Lack of check of input size can make device memory get corrupted because of buffer overflow in snapdragon automobile,… Not rated CVE-2018-5915 Exception in Modem IP stack while processing IPv6 packet in snapdragon automobile, snapdragon mobile and snapdragon wear… Not rated
Track this CVE