Not rated
CVE-2015-9194 In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 210/SD 212/SD 205, SD 400,…
Description
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 210/SD 212/SD 205, SD 400, SD 425, SD 427, SD 430, SD 435, SD 450, SD 617, SD 625, SD 650/52, SD 800, SD 845, and Snapdragon_High_Med_2016, during module load at TZ Startup, memory statically allocated by modules was not being properly set to zero first. Allowing the module to execute without reset gives it access to information from previous app thus leading to information exposure.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Snapdragon Mobile | Versions not published |
References
- source.android.com source.android.com
- 103671 www.securityfocus.com
Timeline
- Published
- Last modified
Other CVEs of Snapdragon Mobile
The 114 CVEs of Snapdragon Mobile →
CVE-2022-25691
Denial of service in Modem due to reachable assertion while processing SIB1 with invalid SCS and bandwidth settings in…
7.5
High
CVE-2022-25673
Denial of service in MODEM due to reachable assertion while processing configuration from network in Snapdragon Mobile
7.5
High
CVE-2022-25689
Denial of service in Modem due to reachable assertion in Snapdragon Mobile
7.5
High
CVE-2022-25672
Denial of service in MODEM due to reachable assertion while processing SIB1 with invalid Bandwidth in Snapdragon Mobile
7.5
High