CVE-2015-9179: Buffer Overflow
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MSM8974, lack of length checking in OEMCryptoDeriveKeysFromSessionKey() could lead to a buffer overflow vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-9179?
CVE-2015-9179 is classified as a high severity vulnerability due to potential buffer overflow risks.
How do I fix CVE-2015-9179?
To fix CVE-2015-9179, ensure that your Android device is updated to the security patch level of April 2018 or later.
Which systems are affected by CVE-2015-9179?
CVE-2015-9179 affects Android devices prior to the April 2018 security patch level that utilize Qualcomm Snapdragon Mobile MSM8974.
What type of vulnerability is CVE-2015-9179?
CVE-2015-9179 is a buffer overflow vulnerability caused by a lack of length checking in the OEMCrypto_DeriveKeysFromSessionKey() function.
What causes the buffer overflow in CVE-2015-9179?
The buffer overflow in CVE-2015-9179 is caused by improper length checking when deriving keys from a session key.