CVE-2015-9180: Buffer Overflow
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, and SD 850, the response pointer passed from user space to SDMXprocess is not checked before it is used. If the given response buffer length is smaller than 16 bytes, the response values will be written to a memory outside the buffer, possibly in the secure memory area.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2015-9180?
CVE-2015-9180 is a vulnerability that exists in Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear devices.
Who is affected by CVE-2015-9180?
Devices running Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820a, SD 835, SD 845, SD 850 firmware versions before 2018-04-05 are affected.
What is the severity rating of CVE-2015-9180?
CVE-2015-9180 has a severity rating of 9.8, which is considered critical.
How can I fix CVE-2015-9180?
To fix CVE-2015-9180, you should update your device to the latest security patch level or firmware version provided by Qualcomm or Android.
Where can I find more information about CVE-2015-9180?
You can find more information about CVE-2015-9180 on the following references: [SecurityFocus](http://www.securityfocus.com/bid/103671), [Android Security Bulletin](https://source.android.com/security/bulletin/2018-04-01), [Android Security Bulletin - CVE-2015-9180](https://source.android.com/docs/security/bulletin/2018-04-01/#asterisk).