CVE-2015-9141: Buffer Overflow
First published: Mon Apr 02 2018(Updated: )
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 615/16/SD 415, SD 617, SD 800, SD 808, and SD 810, in HHO scenarios, during the ACQ procedure, there are possible instances where the search database is incorrectly updated resulting in memory corruption due to buffer overflow.
Credit: product-security@qualcomm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Android | ||
| Qualcomm MDM9206 | ||
| Qualcomm MDM9206 firmware | ||
| Qualcomm MD9607 Firmware | ||
| Qualcomm MDM9607 firmware | ||
| Qualcomm MDM9635M firmware | ||
| Qualcomm MDM9635M firmware | ||
| Qualcomm 8909 Firmware | ||
| Qualcomm Snapdragon 8909 | ||
| Qualcomm SD210 Firmware | ||
| Qualcomm SD 210 Firmware | ||
| Qualcomm SD 212 | ||
| Qualcomm SD 212 Firmware | ||
| Qualcomm 205 Firmware | ||
| Qualcomm SD205 Firmware | ||
| Qualcomm SD 400 Firmware | ||
| Qualcomm Snapdragon 400 | ||
| Qualcomm SD410 Firmware | ||
| Qualcomm Snapdragon 410 | ||
| Qualcomm SD412 Firmware | ||
| Qualcomm SD412 | ||
| Qualcomm SDR425 Firmware | ||
| Qualcomm Snapdragon 425 | ||
| Qualcomm SD 430 Firmware | ||
| Qualcomm SD 430 Firmware | ||
| Qualcomm SD615 Firmware | ||
| Qualcomm Snapdragon 615 | ||
| Qualcomm SD 616 Firmware | ||
| Qualcomm Snapdragon 616 | ||
| Qualcomm Snapdragon 415 Firmware | ||
| Qualcomm Snapdragon 415 | ||
| Qualcomm SD617 Firmware | ||
| Qualcomm QCA617 | ||
| Qualcomm Snapdragon 800 Firmware | ||
| Qualcomm Snapdragon 800 | ||
| Qualcomm SD 808 Firmware | ||
| Qualcomm Snapdragon 808 | ||
| Qualcomm Snapdragon 810 Firmware | ||
| Qualcomm Snapdragon 810 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2015-9141?
The severity of CVE-2015-9141 is critical with a severity value of 9.8.
Which devices are affected by CVE-2015-9141?
Android devices before 2018-04-05 with Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 615/16/SD 415, SD 617, SD 800, SD 808, and SD 810 are affected by CVE-2015-9141.
What is the vulnerability description of CVE-2015-9141?
CVE-2015-9141 is a vulnerability in Android devices before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear. It can be exploited in HHO scenarios during the ACQ procedure.
What is the Common Weakness Enumeration (CWE) ID for CVE-2015-9141?
The Common Weakness Enumeration (CWE) ID for CVE-2015-9141 is 119.
Where can I find more information about CVE-2015-9141?
You can find more information about CVE-2015-9141 at the following references: [Link 1](http://www.securityfocus.com/bid/103671), [Link 2](https://source.android.com/security/bulletin/2018-04-01), [Link 3](https://source.android.com/docs/security/bulletin/2018-04-01/#asterisk)
- agent/references
- agent/type
- agent/first-publish-date
- agent/author
- agent/severity
- agent/weakness
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/source
- collector/android-source
- source/Android
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- vendor/google
- canonical/android
- vendor/qualcomm
- canonical/qualcomm mdm9206
- canonical/qualcomm mdm9206 firmware
- canonical/qualcomm md9607 firmware
- canonical/qualcomm mdm9607 firmware
- canonical/qualcomm mdm9635m firmware
- canonical/qualcomm 8909 firmware
- canonical/qualcomm snapdragon 8909
- canonical/qualcomm sd210 firmware
- canonical/qualcomm sd 210 firmware
- canonical/qualcomm sd 212
- canonical/qualcomm sd 212 firmware
- canonical/qualcomm 205 firmware
- canonical/qualcomm sd205 firmware
- canonical/qualcomm sd 400 firmware
- canonical/qualcomm snapdragon 400
- canonical/qualcomm sd410 firmware
- canonical/qualcomm snapdragon 410
- canonical/qualcomm sd412 firmware
- canonical/qualcomm sd412
- canonical/qualcomm sdr425 firmware
- canonical/qualcomm snapdragon 425
- canonical/qualcomm sd 430 firmware
- canonical/qualcomm sd615 firmware
- canonical/qualcomm snapdragon 615
- canonical/qualcomm sd 616 firmware
- canonical/qualcomm snapdragon 616
- canonical/qualcomm snapdragon 415 firmware
- canonical/qualcomm snapdragon 415
- canonical/qualcomm sd617 firmware
- canonical/qualcomm qca617
- canonical/qualcomm snapdragon 800 firmware
- canonical/qualcomm snapdragon 800
- canonical/qualcomm sd 808 firmware
- canonical/qualcomm snapdragon 808
- canonical/qualcomm snapdragon 810 firmware
- canonical/qualcomm snapdragon 810