First published: Mon Apr 02 2018(Updated: )
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9625, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 820, and SD 820A, no address argument validation is performed on calls to the qsee_prng_getdata syscall.
Credit: product-security@qualcomm.com
Affected Software | Affected Version | How to fix |
---|---|---|
Qualcomm MDM9625 firmware | ||
Qualcomm MDM9625 | ||
qualcomm sd 410 firmware | ||
qualcomm sd 410 | ||
qualcomm sd 412 firmware | ||
qualcomm sd 412 | ||
qualcomm SD 425 firmware | ||
qualcomm SD 425 | ||
Qualcomm SD 430 firmware | ||
Qualcomm SD 430 | ||
Qualcomm SD 450 firmware | ||
Qualcomm SD 450 | ||
qualcomm sd 615 firmware | ||
qualcomm sd 615 | ||
qualcomm sd 616 firmware | ||
qualcomm sd 616 | ||
qualcomm sd 415 firmware | ||
qualcomm sd 415 | ||
qualcomm sd 617 firmware | ||
Qualcomm QCA617 | ||
qualcomm SD 625 firmware | ||
qualcomm SD 625 | ||
qualcomm sd 650 firmware | ||
qualcomm sd 650 | ||
qualcomm sd 652 firmware | ||
qualcomm sd 652 | ||
qualcomm SD 820 firmware | ||
qualcomm SD 820 | ||
qualcomm SD 820A firmware | ||
qualcomm SD 820A | ||
Android |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2015-9115 has a high severity rating due to the lack of address argument validation, which could lead to potential exposure of sensitive data.
To fix CVE-2015-9115, upgrade the affected Qualcomm Snapdragon firmware to the latest version that includes security patches.
CVE-2015-9115 affects multiple Qualcomm Snapdragon models including MDM9625, SD 410, SD 425, SD 430, SD 450, SD 615, SD 820, and others.
CVE-2015-9115 is classified as an improper input validation vulnerability affecting the Qualcomm hardware environment.
CVE-2015-9115 was disclosed on April 5, 2018, and impacts Android devices prior to that date.