CVE-2015-9127: Null Pointer Dereference

Published Apr 2, 2018

Updated

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, and SD 810, possible null pointer dereference occurs due to failure of memory allocation when a large value is passed for buffer allocation in the Playready App.

Affected Software

23 affected components

Google Android

QUALCOMM Msm8909w Firmware

QUALCOMM MSM8909W

QUALCOMM Sd 210 Firmware

QUALCOMM SD 210

QUALCOMM Sd 212 Firmware

QUALCOMM SD 212

QUALCOMM Sd 205 Firmware

QUALCOMM SD 205

QUALCOMM Sd 400 Firmware

QUALCOMM SD 400

QUALCOMM Sd 410 Firmware

QUALCOMM SD 410

QUALCOMM Sd 412 Firmware

QUALCOMM Sd 412

QUALCOMM Sd 615 Firmware

QUALCOMM SD 615

QUALCOMM Sd 616 Firmware

QUALCOMM Sd 616

QUALCOMM Sd 415 Firmware

QUALCOMM SD 415

QUALCOMM Sd 810 Firmware

QUALCOMM SD 810

Event History

Apr 2, 2018

CVE Published

via Android·12:00 AM

Apr 18, 2018

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2015-9127?

The severity of CVE-2015-9127 is critical.

What is the vulnerability ID of this vulnerability?

The vulnerability ID of this vulnerability is CVE-2015-9127.

Which software is affected by CVE-2015-9127?

Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, and SD 810 are affected by CVE-2015-9127.

How severe is CVE-2015-9127?

CVE-2015-9127 has a severity rating of 9.8 (critical).

Where can I find more information about CVE-2015-9127?

You can find more information about CVE-2015-9127 at the following references: [1](http://www.securityfocus.com/bid/103671), [2](https://source.android.com/security/bulletin/2018-04-01), [3](https://source.android.com/docs/security/bulletin/2018-04-01/#asterisk).