First published: Mon Apr 02 2018(Updated: )
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Small Cell SoC FSM9055, MDM9635M, SD 400, and SD 800, improper input validation in tzbsp_ocmem can cause privilege escalation.
Credit: product-security@qualcomm.com
Affected Software | Affected Version | How to fix |
---|---|---|
Qualcomm FSM9055 | ||
Qualcomm FSM9055 Firmware | ||
Qualcomm MDM9635M firmware | ||
Qualcomm MDM9635M | ||
qualcomm SD 400 firmware | ||
qualcomm SD 400 | ||
qualcomm SD 800 firmware | ||
qualcomm SD 800 | ||
Android |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2015-9196 is a vulnerability in Android devices before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Small Cell SoC FSM9055, MDM9635M, SD 400, and SD 800.
CVE-2015-9196 has a severity rating of 9.8 (Critical).
CVE-2015-9196 can cause privilege escalation on Google Android devices running before 2018-04-05 or earlier security patch level.
Yes, Qualcomm FSM9055 firmware is vulnerable to CVE-2015-9196.
To fix CVE-2015-9196, update your Android device to a security patch level after 2018-04-05.