CVE-2015-9191: Null Pointer Dereference
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 617, SD 650/52, SD 808, SD 810, and SDX20, in a QTEE syscall handler, an untrusted pointer dereference can occur.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-9191?
The severity of CVE-2015-9191 is critical.
Which devices are affected by CVE-2015-9191?
Android devices before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 617, SD 650/52, SD 808, SD 810, and SDX20 are affected.
How do I fix CVE-2015-9191?
Install the security patch released on or after 2018-04-05 on your Android device.
Where can I find more information about CVE-2015-9191?
You can find more information about CVE-2015-9191 on the following websites: [SecurityFocus](http://www.securityfocus.com/bid/103671), [Android Security Bulletin - April 2018](https://source.android.com/security/bulletin/2018-04-01), [Android Security Bulletin - April 2018 (Specifics)](https://source.android.com/docs/security/bulletin/2018-04-01/#asterisk).
Which CWE is associated with CVE-2015-9191?
CVE-2015-9191 is associated with CWE-476.