CVE-2015-9115: Input Validation
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9625, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 820, and SD 820A, no address argument validation is performed on calls to the qseeprnggetdata syscall.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-9115?
CVE-2015-9115 has a high severity rating due to the lack of address argument validation, which could lead to potential exposure of sensitive data.
How do I fix CVE-2015-9115?
To fix CVE-2015-9115, upgrade the affected Qualcomm Snapdragon firmware to the latest version that includes security patches.
Which devices are affected by CVE-2015-9115?
CVE-2015-9115 affects multiple Qualcomm Snapdragon models including MDM9625, SD 410, SD 425, SD 430, SD 450, SD 615, SD 820, and others.
What type of vulnerability is CVE-2015-9115?
CVE-2015-9115 is classified as an improper input validation vulnerability affecting the Qualcomm hardware environment.
When was CVE-2015-9115 disclosed?
CVE-2015-9115 was disclosed on April 5, 2018, and impacts Android devices prior to that date.