First published: Mon Apr 02 2018(Updated: )
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835, SD 845, SDM630, SDM636, SDM660, and Snapdragon_High_Med_2016, when processing bad HEVC clips, the DPB fills, and with no error handling for DPB being full, a hang occurs.
Credit: product-security@qualcomm.com
Affected Software | Affected Version | How to fix |
---|---|---|
Qualcomm MSM8909W | ||
Qualcomm MSM8909W | ||
qualcomm SD 210 firmware | ||
qualcomm SD 210 | ||
qualcomm SD 212 firmware | ||
qualcomm SD 212 | ||
qualcomm SD 205 firmware | ||
qualcomm SD 205 | ||
qualcomm SD 400 firmware | ||
qualcomm SD 400 | ||
qualcomm sd 410 firmware | ||
qualcomm sd 410 | ||
qualcomm sd 412 firmware | ||
qualcomm sd 412 | ||
qualcomm SD 425 firmware | ||
qualcomm SD 425 | ||
Qualcomm SD 430 firmware | ||
Qualcomm SD 430 | ||
Qualcomm SD 450 firmware | ||
Qualcomm SD 450 | ||
qualcomm SD 625 firmware | ||
qualcomm SD 625 | ||
qualcomm sd 650 firmware | ||
qualcomm sd 650 | ||
qualcomm sd 652 firmware | ||
qualcomm sd 652 | ||
qualcomm SD 800 firmware | ||
qualcomm SD 800 | ||
qualcomm SD 808 firmware | ||
qualcomm SD 808 | ||
qualcomm sd 810 firmware | ||
qualcomm sd 810 | ||
qualcomm SD 820 firmware | ||
qualcomm SD 820 | ||
qualcomm SD 835 firmware | ||
qualcomm SD 835 | ||
qualcomm SD 845 firmware | ||
qualcomm SD 845 | ||
qualcomm SDM630 firmware | ||
qualcomm SDM630 | ||
qualcomm SDM636 firmware | ||
qualcomm SDM636 | ||
Qualcomm SD 427 firmware | ||
Qualcomm SD 427 | ||
Qualcomm SD 435 firmware | ||
Qualcomm SD 435 | ||
qualcomm SDM660 firmware | ||
qualcomm SDM660 | ||
Android |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2015-9218 is high, with a severity value of 5.5.
The affected software for CVE-2015-9218 includes Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835, SD 845, SDM630, SDM636, SDM660, and Snapd
To fix CVE-2015-9218, update your device's Android operating system to a version that includes the security patch released on April 5, 2018 or later.
You can find more information about CVE-2015-9218 at the following references: [SecurityFocus](http://www.securityfocus.com/bid/103671), [Android Security Bulletin - April 2018](https://source.android.com/security/bulletin/2018-04-01), [Android Security Bulletin - April 2018 - Asterisk](https://source.android.com/docs/security/bulletin/2018-04-01/#asterisk).
The CWE classification for CVE-2015-9218 is CWE-388.