Aller au contenu
Se connecter
Non notée

CVE-2015-9185 In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and…

Description

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, and SD 850, in multiple Secure DEMUX functions (e.g., SDMX_open_session, SDMX_close_session, SDMX_set_session_cfg), when parameter validation fails, an error code is written into a response buffer, without checking that response buffer length (rsplen) passed from HLOS is large enough to hold the response. If the buffer is at the end of a non-secure page followed by secured memory page, this can cause a secure memory corruption.

Produits et versions touchés

Produit Versions touchées Corrigé en
Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Versions non publiées

Autres CVE de Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear

Les 123 CVE de Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear →
CVE-2018-5867 Lack of checking input size can lead to buffer overflow In WideVine in snapdragon automobile, snapdragon mobile and… Non notée CVE-2017-18331 Improper access control on secure display buffers in snapdragon automobile, snapdragon mobile and snapdragon wear in… Non notée CVE-2018-11279 Lack of check of input size can make device memory get corrupted because of buffer overflow in snapdragon automobile,… Non notée CVE-2018-5915 Exception in Modem IP stack while processing IPv6 packet in snapdragon automobile, snapdragon mobile and snapdragon wear… Non notée
Suivre cette CVE