CVE-2015-9220
Summary
| CVE | CVE-2015-9220 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2018-04-18 14:29:00 UTC |
| Updated | 2018-05-02 12:59:00 UTC |
| Description | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, IPQ8064, MDM9206, MDM9607, MDM9640, MDM9650, QCA4531, QCA6174A, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9378, QCA9379, QCA9558, QCA9880, QCA9886, QCA9980, SD 210/SD 212/SD 205, SD 425, SD 625, SD 810, SD 820, and SDX20, integer overflow occurs when the size of the firmware section is incorrectly encoded in the firmware image. |
Risk And Classification
Problem Types: CWE-190
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Qualcomm | Ipq4019 | - | All | All | All |
| Hardware | Qualcomm | Ipq4019 | - | All | All | All |
| Operating System | Qualcomm | Ipq4019 Firmware | - | All | All | All |
| Operating System | Qualcomm | Ipq4019 Firmware | - | All | All | All |
| Hardware | Qualcomm | Ipq8064 | - | All | All | All |
| Hardware | Qualcomm | Ipq8064 | - | All | All | All |
| Operating System | Qualcomm | Ipq8064 Firmware | - | All | All | All |
| Operating System | Qualcomm | Ipq8064 Firmware | - | All | All | All |
| Hardware | Qualcomm | Mdm9206 | - | All | All | All |
| Hardware | Qualcomm | Mdm9206 | - | All | All | All |
| Operating System | Qualcomm | Mdm9206 Firmware | - | All | All | All |
| Operating System | Qualcomm | Mdm9206 Firmware | - | All | All | All |
| Hardware | Qualcomm | Mdm9607 | - | All | All | All |
| Hardware | Qualcomm | Mdm9607 | - | All | All | All |
| Operating System | Qualcomm | Mdm9607 Firmware | - | All | All | All |
| Operating System | Qualcomm | Mdm9607 Firmware | - | All | All | All |
| Hardware | Qualcomm | Mdm9640 | - | All | All | All |
| Hardware | Qualcomm | Mdm9640 | - | All | All | All |
| Operating System | Qualcomm | Mdm9640 Firmware | - | All | All | All |
| Operating System | Qualcomm | Mdm9640 Firmware | - | All | All | All |
| Hardware | Qualcomm | Mdm9650 | - | All | All | All |
| Hardware | Qualcomm | Mdm9650 | - | All | All | All |
| Operating System | Qualcomm | Mdm9650 Firmware | - | All | All | All |
| Operating System | Qualcomm | Mdm9650 Firmware | - | All | All | All |
| Hardware | Qualcomm | Qca4531 | - | All | All | All |
| Hardware | Qualcomm | Qca4531 | - | All | All | All |
| Operating System | Qualcomm | Qca4531 Firmware | - | All | All | All |
| Operating System | Qualcomm | Qca4531 Firmware | - | All | All | All |
| Hardware | Qualcomm | Qca6174a | - | All | All | All |
| Hardware | Qualcomm | Qca6174a | - | All | All | All |
| Operating System | Qualcomm | Qca6174a Firmware | - | All | All | All |
| Operating System | Qualcomm | Qca6174a Firmware | - | All | All | All |
| Hardware | Qualcomm | Qca6574au | - | All | All | All |
| Hardware | Qualcomm | Qca6574au | - | All | All | All |
| Operating System | Qualcomm | Qca6574au Firmware | - | All | All | All |
| Operating System | Qualcomm | Qca6574au Firmware | - | All | All | All |
| Hardware | Qualcomm | Qca6584 | - | All | All | All |
| Hardware | Qualcomm | Qca6584 | - | All | All | All |
| Hardware | Qualcomm | Qca6584au | - | All | All | All |
| Hardware | Qualcomm | Qca6584au | - | All | All | All |
| Operating System | Qualcomm | Qca6584au Firmware | - | All | All | All |
| Operating System | Qualcomm | Qca6584au Firmware | - | All | All | All |
| Operating System | Qualcomm | Qca6584 Firmware | - | All | All | All |
| Operating System | Qualcomm | Qca6584 Firmware | - | All | All | All |
| Hardware | Qualcomm | Qca9377 | - | All | All | All |
| Hardware | Qualcomm | Qca9377 | - | All | All | All |
| Operating System | Qualcomm | Qca9377 Firmware | - | All | All | All |
| Operating System | Qualcomm | Qca9377 Firmware | - | All | All | All |
| Hardware | Qualcomm | Qca9378 | - | All | All | All |
| Hardware | Qualcomm | Qca9378 | - | All | All | All |
| Operating System | Qualcomm | Qca9378 Firmware | - | All | All | All |
| Operating System | Qualcomm | Qca9378 Firmware | - | All | All | All |
| Hardware | Qualcomm | Qca9379 | - | All | All | All |
| Hardware | Qualcomm | Qca9379 | - | All | All | All |
| Operating System | Qualcomm | Qca9379 Firmware | - | All | All | All |
| Operating System | Qualcomm | Qca9379 Firmware | - | All | All | All |
| Hardware | Qualcomm | Qca9558 | - | All | All | All |
| Hardware | Qualcomm | Qca9558 | - | All | All | All |
| Operating System | Qualcomm | Qca9558 Firmware | - | All | All | All |
| Operating System | Qualcomm | Qca9558 Firmware | - | All | All | All |
| Hardware | Qualcomm | Qca9880 | - | All | All | All |
| Hardware | Qualcomm | Qca9880 | - | All | All | All |
| Operating System | Qualcomm | Qca9880 Firmware | - | All | All | All |
| Operating System | Qualcomm | Qca9880 Firmware | - | All | All | All |
| Hardware | Qualcomm | Qca9886 | - | All | All | All |
| Hardware | Qualcomm | Qca9886 | - | All | All | All |
| Operating System | Qualcomm | Qca9886 Firmware | - | All | All | All |
| Operating System | Qualcomm | Qca9886 Firmware | - | All | All | All |
| Hardware | Qualcomm | Qca9980 | - | All | All | All |
| Hardware | Qualcomm | Qca9980 | - | All | All | All |
| Operating System | Qualcomm | Qca9980 Firmware | - | All | All | All |
| Operating System | Qualcomm | Qca9980 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sdx20 | - | All | All | All |
| Hardware | Qualcomm | Sdx20 | - | All | All | All |
| Operating System | Qualcomm | Sdx20 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sdx20 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sd 205 | - | All | All | All |
| Hardware | Qualcomm | Sd 205 | - | All | All | All |
| Operating System | Qualcomm | Sd 205 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 205 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sd 210 | - | All | All | All |
| Hardware | Qualcomm | Sd 210 | - | All | All | All |
| Operating System | Qualcomm | Sd 210 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 210 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sd 212 | - | All | All | All |
| Hardware | Qualcomm | Sd 212 | - | All | All | All |
| Operating System | Qualcomm | Sd 212 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 212 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sd 425 | - | All | All | All |
| Hardware | Qualcomm | Sd 425 | - | All | All | All |
| Operating System | Qualcomm | Sd 425 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 425 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sd 625 | - | All | All | All |
| Hardware | Qualcomm | Sd 625 | - | All | All | All |
| Operating System | Qualcomm | Sd 625 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 625 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sd 810 | - | All | All | All |
| Hardware | Qualcomm | Sd 810 | - | All | All | All |
| Operating System | Qualcomm | Sd 810 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 810 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sd 820 | - | All | All | All |
| Hardware | Qualcomm | Sd 820 | - | All | All | All |
| Operating System | Qualcomm | Sd 820 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sd 820 Firmware | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Google Android Multiple Qualcomm Components Multiple Unspecified Security Vulnerabilities | BID | www.securityfocus.com | Third Party Advisory, VDB Entry |
| Android Security Bulletin—April 2018 | Android Open Source Project | CONFIRM | source.android.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.