CVE-2015-9148
Summary
| CVE | CVE-2015-9148 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2018-04-18 14:29:00 UTC |
| Updated | 2018-05-09 16:45:00 UTC |
| Description | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, SD 400, SD 425, SD 430, SD 450, SD 600, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, and SDX20, in the Diag User-PD command registration function, a length variable used during buffer allocation is not checked, so if it is very large, an integer overflow followed by a buffer overflow occurs. |
Risk And Classification
Problem Types: CWE-119 | CWE-190
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Qualcomm | Mdm9625 | - | All | All | All |
| Hardware | Qualcomm | Mdm9625 | - | All | All | All |
| Operating System | Qualcomm | Mdm9625 Firmware | - | All | All | All |
| Operating System | Qualcomm | Mdm9625 Firmware | - | All | All | All |
| Hardware | Qualcomm | Mdm9635m | - | All | All | All |
| Hardware | Qualcomm | Mdm9635m | - | All | All | All |
| Operating System | Qualcomm | Mdm9635m Firmware | - | All | All | All |
| Operating System | Qualcomm | Mdm9635m Firmware | - | All | All | All |
| Hardware | Qualcomm | Mdm9640 | - | All | All | All |
| Hardware | Qualcomm | Mdm9640 | - | All | All | All |
| Operating System | Qualcomm | Mdm9640 Firmware | - | All | All | All |
| Operating System | Qualcomm | Mdm9640 Firmware | - | All | All | All |
| Hardware | Qualcomm | Mdm9645 | - | All | All | All |
| Hardware | Qualcomm | Mdm9645 | - | All | All | All |
| Operating System | Qualcomm | Mdm9645 Firmware | - | All | All | All |
| Operating System | Qualcomm | Mdm9645 Firmware | - | All | All | All |
| Hardware | Qualcomm | Mdm9650 | - | All | All | All |
| Hardware | Qualcomm | Mdm9650 | - | All | All | All |
| Operating System | Qualcomm | Mdm9650 Firmware | - | All | All | All |
| Operating System | Qualcomm | Mdm9650 Firmware | - | All | All | All |
| Hardware | Qualcomm | Mdm9655 | - | All | All | All |
| Hardware | Qualcomm | Mdm9655 | - | All | All | All |
| Operating System | Qualcomm | Mdm9655 Firmware | - | All | All | All |
| Operating System | Qualcomm | Mdm9655 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sdx20 | - | All | All | All |
| Hardware | Qualcomm | Sdx20 | - | All | All | All |
| Operating System | Qualcomm | Sdx20 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sdx20 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sd 400 | - | All | All | All |
| Hardware | Qualcomm | Sd 400 | - | All | All | All |
| Operating System | Qualcomm | Sd 400 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 400 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sd 425 | - | All | All | All |
| Hardware | Qualcomm | Sd 425 | - | All | All | All |
| Operating System | Qualcomm | Sd 425 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 425 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sd 430 | - | All | All | All |
| Hardware | Qualcomm | Sd 430 | - | All | All | All |
| Operating System | Qualcomm | Sd 430 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 430 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sd 450 | - | All | All | All |
| Hardware | Qualcomm | Sd 450 | - | All | All | All |
| Operating System | Qualcomm | Sd 450 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 450 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sd 600 | - | All | All | All |
| Hardware | Qualcomm | Sd 600 | - | All | All | All |
| Operating System | Qualcomm | Sd 600 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 600 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sd 617 | - | All | All | All |
| Hardware | Qualcomm | Sd 617 | - | All | All | All |
| Operating System | Qualcomm | Sd 617 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 617 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sd 625 | - | All | All | All |
| Hardware | Qualcomm | Sd 625 | - | All | All | All |
| Operating System | Qualcomm | Sd 625 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 625 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sd 650 | - | All | All | All |
| Hardware | Qualcomm | Sd 650 | - | All | All | All |
| Operating System | Qualcomm | Sd 650 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 650 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sd 652 | - | All | All | All |
| Hardware | Qualcomm | Sd 652 | - | All | All | All |
| Operating System | Qualcomm | Sd 652 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 652 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sd 800 | - | All | All | All |
| Hardware | Qualcomm | Sd 800 | - | All | All | All |
| Operating System | Qualcomm | Sd 800 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 800 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sd 808 | - | All | All | All |
| Hardware | Qualcomm | Sd 808 | - | All | All | All |
| Operating System | Qualcomm | Sd 808 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 808 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sd 810 | - | All | All | All |
| Hardware | Qualcomm | Sd 810 | - | All | All | All |
| Operating System | Qualcomm | Sd 810 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 810 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sd 820 | - | All | All | All |
| Hardware | Qualcomm | Sd 820 | - | All | All | All |
| Hardware | Qualcomm | Sd 820a | - | All | All | All |
| Hardware | Qualcomm | Sd 820a | - | All | All | All |
| Operating System | Qualcomm | Sd 820a Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 820a Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 820 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 820 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sd 835 | - | All | All | All |
| Hardware | Qualcomm | Sd 835 | - | All | All | All |
| Operating System | Qualcomm | Sd 835 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 835 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sd 845 | - | All | All | All |
| Hardware | Qualcomm | Sd 845 | - | All | All | All |
| Operating System | Qualcomm | Sd 845 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 845 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sd 850 | - | All | All | All |
| Hardware | Qualcomm | Sd 850 | - | All | All | All |
| Operating System | Qualcomm | Sd 850 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 850 Firmware | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Google Android Multiple Qualcomm Components Multiple Unspecified Security Vulnerabilities | BID | www.securityfocus.com | Third Party Advisory, VDB Entry |
| Android Security Bulletin—April 2018 | Android Open Source Project | CONFIRM | source.android.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.