Aller au contenu
Se connecter
Non notée

CVE-2015-9166 In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and…

Description

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, and SD 850, DRM provisioning mechanisms used in QSEE applications have a feature to prevent further provisioning. This is done by creating an SFS file called 'finalize_prov_flag.data' at the end of provisioning. When this feature is enabled, provisioning calls check for the existence of the file in order to decide whether to do provisioning or not. Current implementation allows provisioning without sufficient checks.

Produits et versions touchés

Produit Versions touchées Corrigé en
Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Versions non publiées

Autres CVE de Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear

Les 123 CVE de Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear →
CVE-2018-5867 Lack of checking input size can lead to buffer overflow In WideVine in snapdragon automobile, snapdragon mobile and… Non notée CVE-2017-18331 Improper access control on secure display buffers in snapdragon automobile, snapdragon mobile and snapdragon wear in… Non notée CVE-2018-11279 Lack of check of input size can make device memory get corrupted because of buffer overflow in snapdragon automobile,… Non notée CVE-2018-5915 Exception in Modem IP stack while processing IPv6 packet in snapdragon automobile, snapdragon mobile and snapdragon wear… Non notée
Suivre cette CVE