First published: Mon Apr 02 2018(Updated: )
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, SD 617, SD 650/52, SD 800, SD 808, and SD 810, buffer over-read in QSEE app may cause confidential information to be leaked.
Credit: product-security@qualcomm.com
Affected Software | Affected Version | How to fix |
---|---|---|
Google Android | ||
Qualcomm MSM8909W | ||
Qualcomm MSM8909W | ||
qualcomm SD 210 firmware | ||
qualcomm SD 210 | ||
qualcomm SD 212 firmware | ||
qualcomm SD 212 | ||
qualcomm SD 205 firmware | ||
qualcomm SD 205 | ||
qualcomm SD 400 firmware | ||
qualcomm SD 400 | ||
qualcomm sd 410 firmware | ||
qualcomm sd 410 | ||
qualcomm sd 412 firmware | ||
qualcomm sd 412 | ||
qualcomm sd 615 firmware | ||
qualcomm sd 615 | ||
qualcomm sd 616 firmware | ||
qualcomm sd 616 | ||
qualcomm sd 415 firmware | ||
qualcomm sd 415 | ||
qualcomm sd 617 firmware | ||
qualcomm sd 617 | ||
qualcomm sd 650 firmware | ||
qualcomm sd 650 | ||
qualcomm sd 652 firmware | ||
qualcomm sd 652 | ||
qualcomm SD 800 firmware | ||
qualcomm SD 800 | ||
qualcomm SD 808 firmware | ||
qualcomm SD 808 | ||
qualcomm sd 810 firmware | ||
qualcomm sd 810 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2015-9169 is a vulnerability found in Android devices before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, SD 617, SD 650/52, SD 800, SD 808, and SD 810. It is a buffer over-read in QSEE app that may cause the leakage of confidential information.
The severity of CVE-2015-9169 is high, with a CVSS score of 7.5.
CVE-2015-9169 affects Android devices before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, SD 617, SD 650/52, SD 800, SD 808, and SD 810.
To fix CVE-2015-9169, it is recommended to update Android devices to the latest security patch level or firmware version provided by the device manufacturer.
You can find more information about CVE-2015-9169 on the following sources: [SecurityFocus](http://www.securityfocus.com/bid/103671), [Android Security Bulletin - April 2018](https://source.android.com/security/bulletin/2018-04-01), [Android Security Bulletin - April 2018 (details)](https://source.android.com/docs/security/bulletin/2018-04-01/#asterisk).