CVE-2015-9112

Summary

CVE	CVE-2015-9112
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2018-04-18 14:29:00 UTC
Updated	2018-05-09 16:59:00 UTC
Description	In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9625, SD 400, SD 800, SD 820, and SD 820A, lack of input validation in QSEE can cause potential buffer overflow.

Problem Types: CWE-119

Type	Vendor	Product	Version	Update	Edition	Language
Hardware	Qualcomm	Mdm9625	-	All	All	All
Hardware	Qualcomm	Mdm9625	-	All	All	All
Operating System	Qualcomm	Mdm9625 Firmware	-	All	All	All
Operating System	Qualcomm	Mdm9625 Firmware	-	All	All	All
Hardware	Qualcomm	Sd 400	-	All	All	All
Hardware	Qualcomm	Sd 400	-	All	All	All
Operating System	Qualcomm	Sd 400 Firmware	-	All	All	All
Operating System	Qualcomm	Sd 400 Firmware	-	All	All	All
Hardware	Qualcomm	Sd 800	-	All	All	All
Hardware	Qualcomm	Sd 800	-	All	All	All
Operating System	Qualcomm	Sd 800 Firmware	-	All	All	All
Operating System	Qualcomm	Sd 800 Firmware	-	All	All	All
Hardware	Qualcomm	Sd 820	-	All	All	All
Hardware	Qualcomm	Sd 820	-	All	All	All
Hardware	Qualcomm	Sd 820a	-	All	All	All
Hardware	Qualcomm	Sd 820a	-	All	All	All
Operating System	Qualcomm	Sd 820a Firmware	-	All	All	All
Operating System	Qualcomm	Sd 820a Firmware	-	All	All	All
Operating System	Qualcomm	Sd 820 Firmware	-	All	All	All
Operating System	Qualcomm	Sd 820 Firmware	-	All	All	All

Reference	Source	Link	Tags
Google Android Multiple Qualcomm Components Multiple Unspecified Security Vulnerabilities	BID	www.securityfocus.com	Third Party Advisory, VDB Entry
Android Security Bulletin—April 2018 \| Android Open Source Project	CONFIRM	source.android.com	Vendor Advisory
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

There are currently no legacy QID mappings associated with this CVE.