What is CVE-2015-9143?

CVE-2015-9143 is a vulnerability that affects Android before April 2018 and Qualcomm Snapdragon Mobile and Snapdragon Wear devices.

How severe is CVE-2015-9143?

CVE-2015-9143 has a severity rating of 9.8, which is considered critical.

Which software is affected by CVE-2015-9143?

CVE-2015-9143 affects Android before April 2018 and Qualcomm Snapdragon Mobile and Snapdragon Wear devices.

How can I fix CVE-2015-9143?

To fix CVE-2015-9143, update to the latest security patch level for Android or install the necessary firmware updates for Qualcomm Snapdragon devices.

Where can I find more information about CVE-2015-9143?

You can find more information about CVE-2015-9143 at the following references: [SecurityFocus](http://www.securityfocus.com/bid/103671), [Android Security Bulletin](https://source.android.com/security/bulletin/2018-04-01), [Android Security Bulletin (April 2018)](https://source.android.com/docs/security/bulletin/2018-04-01/#asterisk).

Vulnerability/
CVE-2015-9143

critical

CWE

119

2/4/2018

26/8/2024

CVE-2015-9143: Buffer Overflow

First published: Mon Apr 02 2018(Updated: )

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9615, MDM9625, MDM9640, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 600, SD 615/16/SD 415, and SDX20, when reading CDT from eMMC with a very large meta offset (>size of default CDT-array compiled in bootloader) for one of the CDBs, a buffer overflow occurs.

Credit: product-security@qualcomm.com

Affected Software	Affected Version	How to fix
Qualcomm MDM9206 firmware
Qualcomm MDM9206
Qualcomm MDM9607 firmware
Qualcomm MDM9607
Qualcomm MDM9615 firmware
Qualcomm MDM9615
Qualcomm MDM9625 firmware
Qualcomm MDM9625
Qualcomm IPQ4019
Qualcomm IPQ4019 Firmware
qualcomm mdm9640 firmware
qualcomm MDM9640
qualcomm mdm9645 firmware
qualcomm mdm9645
Qualcomm MDM9650 firmware
Qualcomm MDM9650
Qualcomm MDM9655 firmware
Qualcomm MDM9655
Qualcomm MSM8909W
Qualcomm MSM8909W
qualcomm SD 210 firmware
qualcomm SD 210
qualcomm SD 212 firmware
qualcomm SD 212
qualcomm SD 205 firmware
qualcomm SD 205
qualcomm SD 400 firmware
qualcomm SD 400
qualcomm sd 410 firmware
qualcomm sd 410
qualcomm sd 412 firmware
qualcomm sd 412
qualcomm SD 600 firmware
qualcomm SD 600
qualcomm sd 615 firmware
qualcomm sd 615
qualcomm sd 616 firmware
qualcomm sd 616
qualcomm sd 415 firmware
qualcomm sd 415
Qualcomm SDX20 Firmware
Qualcomm SDX20 Firmware
Android

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is CVE-2015-9143?
CVE-2015-9143 is a vulnerability that affects Android before April 2018 and Qualcomm Snapdragon Mobile and Snapdragon Wear devices.
How severe is CVE-2015-9143?
CVE-2015-9143 has a severity rating of 9.8, which is considered critical.
Which software is affected by CVE-2015-9143?
CVE-2015-9143 affects Android before April 2018 and Qualcomm Snapdragon Mobile and Snapdragon Wear devices.
How can I fix CVE-2015-9143?
To fix CVE-2015-9143, update to the latest security patch level for Android or install the necessary firmware updates for Qualcomm Snapdragon devices.
Where can I find more information about CVE-2015-9143?
You can find more information about CVE-2015-9143 at the following references: [SecurityFocus](http://www.securityfocus.com/bid/103671), [Android Security Bulletin](https://source.android.com/security/bulletin/2018-04-01), [Android Security Bulletin (April 2018)](https://source.android.com/docs/security/bulletin/2018-04-01/#asterisk).