Aller au contenu
Se connecter
Non notée

CVE-2015-9157 In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear…

Description

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9625, MDM9635M, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 600, SD 615/16/SD 415, SD 617, SD 650/52, SD 800, SD 808, and SD 810, in widevine_dash_cmd_handler(), rsp buffers are passed off to widevine commands. These rsp buffers have values in them, such as buffer lengths, that need to be validated to ensure that no buffer overflow/over-reads happen. However, rsp buffers are not always in locked memory, meaning a time-of-check, time-of-use issue can occur where we check that the value is valid, but then a race condition occurs where this memory is swapped out with a different, possibly out of range, value.

Produits et versions touchés

Produit Versions touchées Corrigé en
Snapdragon Mobile, Snapdragon Wear Versions non publiées

Autres CVE de Snapdragon Mobile, Snapdragon Wear

Les 132 CVE de Snapdragon Mobile, Snapdragon Wear →
CVE-2018-5879 Improper length check while processing an MQTT message can lead to heap overflow in snapdragon mobile and snapdragon… Non notée CVE-2018-5880 Improper data length check while processing an event report indication can lead to a buffer overflow in snapdragon… Non notée CVE-2017-18160 AGPS session failure in GNSS module due to cyphersuites are hardcoded and needed manual update everytime in snapdragon… Non notée CVE-2018-11284 Spoofed SMS can be used to send a large number of messages to the device which will in turn initiate a flood of… Non notée
Suivre cette CVE