CVE-2015-9196: Input Validation
Published Apr 2, 2018
·Updated
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Small Cell SoC FSM9055, MDM9635M, SD 400, and SD 800, improper input validation in tzbspocmem can cause privilege escalation.
Affected Software
9 affected components
Qualcomm Fsm9055 Firmware
Qualcomm FSM9055
Qualcomm Mdm9635m Firmware
Qualcomm MDM9635M
Qualcomm Sd 400 Firmware
Qualcomm SD 400
Qualcomm Sd 800 Firmware
Qualcomm SD 800
Google Android
Event History
Apr 2, 2018
CVE Published
via Android·12:00 AM
Apr 18, 2018
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2015-9196?
CVE-2015-9196 is a vulnerability in Android devices before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Small Cell SoC FSM9055, MDM9635M, SD 400, and SD 800.
2
What is the severity of CVE-2015-9196?
CVE-2015-9196 has a severity rating of 9.8 (Critical).
3
How does CVE-2015-9196 impact Google Android?
CVE-2015-9196 can cause privilege escalation on Google Android devices running before 2018-04-05 or earlier security patch level.
4
Is Qualcomm FSM9055 vulnerable to CVE-2015-9196?
Yes, Qualcomm FSM9055 firmware is vulnerable to CVE-2015-9196.
5
How can I fix CVE-2015-9196?
To fix CVE-2015-9196, update your Android device to a security patch level after 2018-04-05.