CVE-2015-9147: Input Validation

Published Apr 2, 2018

Updated

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9625, MDM9635M, SD 400, and SD 800, userspace-provided pointer arguments are not validated.

Affected Software

9 affected components

Google Android

Qualcomm Mdm9625 Firmware

Qualcomm MDM9625

Qualcomm Mdm9635m Firmware

Qualcomm MDM9635M

Qualcomm Sd 400 Firmware

Qualcomm SD 400

Qualcomm Sd 800 Firmware

Qualcomm SD 800

Event History

Apr 2, 2018

CVE Published

via Android·12:00 AM

Apr 18, 2018

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2015-9147?

CVE-2015-9147 is a vulnerability that exists in Android devices with Qualcomm Snapdragon Mobile MDM9625, MDM9635M, SD 400, and SD 800 chipsets before 2018-04-05 security patch level.

What is the severity of CVE-2015-9147?

The severity of CVE-2015-9147 is critical with a CVSS score of 9.8.

Which software is affected by CVE-2015-9147?

Android devices with Qualcomm Snapdragon Mobile MDM9625, MDM9635M, SD 400, and SD 800 chipsets before 2018-04-05 security patch level are affected by CVE-2015-9147.

How does CVE-2015-9147 impact Android devices?

CVE-2015-9147 allows userspace-provided pointer arguments that are not properly validated, which could lead to potential security vulnerabilities and unauthorized access to sensitive data.

Is there a fix available for CVE-2015-9147?

Yes, a fix for CVE-2015-9147 is available in the 2018-04-05 security patch level or later for Android devices with Qualcomm Snapdragon Mobile MDM9625, MDM9635M, SD 400, and SD 800 chipsets.