CVE-2015-9146
Summary
| CVE | CVE-2015-9146 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2018-04-18 14:29:00 UTC |
| Updated | 2018-05-09 16:46:00 UTC |
| Description | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9625, MDM9635M, MDM9645, MDM9650, MDM9655, SD 400, SD 800, SD 835, SD 845, SD 850, and SDX20, when QDI read, write, or ioctl are called, the passed-in pointer is not properly validated before accessing it for the delayed response. |
Risk And Classification
Problem Types: CWE-20
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Qualcomm | Mdm9625 | - | All | All | All |
| Hardware | Qualcomm | Mdm9625 | - | All | All | All |
| Operating System | Qualcomm | Mdm9625 Firmware | - | All | All | All |
| Operating System | Qualcomm | Mdm9625 Firmware | - | All | All | All |
| Hardware | Qualcomm | Mdm9635m | - | All | All | All |
| Hardware | Qualcomm | Mdm9635m | - | All | All | All |
| Operating System | Qualcomm | Mdm9635m Firmware | - | All | All | All |
| Operating System | Qualcomm | Mdm9635m Firmware | - | All | All | All |
| Hardware | Qualcomm | Mdm9650 | - | All | All | All |
| Hardware | Qualcomm | Mdm9650 | - | All | All | All |
| Operating System | Qualcomm | Mdm9650 Firmware | - | All | All | All |
| Operating System | Qualcomm | Mdm9650 Firmware | - | All | All | All |
| Hardware | Qualcomm | Mdm9655 | - | All | All | All |
| Hardware | Qualcomm | Mdm9655 | - | All | All | All |
| Operating System | Qualcomm | Mdm9655 Firmware | - | All | All | All |
| Operating System | Qualcomm | Mdm9655 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sdx20 | - | All | All | All |
| Hardware | Qualcomm | Sdx20 | - | All | All | All |
| Operating System | Qualcomm | Sdx20 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sdx20 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sd 400 | - | All | All | All |
| Hardware | Qualcomm | Sd 400 | - | All | All | All |
| Operating System | Qualcomm | Sd 400 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 400 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sd 800 | - | All | All | All |
| Hardware | Qualcomm | Sd 800 | - | All | All | All |
| Operating System | Qualcomm | Sd 800 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 800 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sd 835 | - | All | All | All |
| Hardware | Qualcomm | Sd 835 | - | All | All | All |
| Operating System | Qualcomm | Sd 835 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 835 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sd 845 | - | All | All | All |
| Hardware | Qualcomm | Sd 845 | - | All | All | All |
| Operating System | Qualcomm | Sd 845 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 845 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sd 850 | - | All | All | All |
| Hardware | Qualcomm | Sd 850 | - | All | All | All |
| Operating System | Qualcomm | Sd 850 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 850 Firmware | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Google Android Multiple Qualcomm Components Multiple Unspecified Security Vulnerabilities | BID | www.securityfocus.com | Third Party Advisory, VDB Entry |
| Android Security Bulletin—April 2018 | Android Open Source Project | CONFIRM | source.android.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.