PT-2018-1245 · Qualcomm+1 · Sd 412+40
Published
2018-04-02
·
Updated
2018-05-01
·
CVE-2015-9224
CVSS v2.0
10
High
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Android versions prior to 2018-04-05 security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear, and Small Cell SoC FSM9055, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, and SDX20
Description
The issue is caused by a buffer overflow in the QURTK write() function of the Qualcomm component in the Android operating system. This can allow a remote attacker to impact the confidentiality, integrity, and availability of protected information due to lack of input validation.
Recommendations
For Android versions prior to 2018-04-05 security patch level on the specified Qualcomm Snapdragon platforms, update to a version with a security patch level of 2018-04-05 or later to resolve the issue.
As a temporary workaround, consider restricting access to the QURTK write() function until a patch is available.
Fix
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Android
Fsm9055
Mdm9206
Mdm9607
Mdm9615
Mdm9625
Mdm9635M
Mdm9640
Mdm9645
Mdm9650
Mdm9655
Msm8909W
Qualcomm Small Cell Soc
Qualcomm Snapdragon Mobile
Qualcomm Snapdragon Wear
Sd 205
Sd 210
Sd 212
Sd 400
Sd 410
Sd 412
Sd 415
Sd 425
Sd 430
Sd 450
Sd 600
Sd 615
Sd 616
Sd 617
Sd 625
Sd 650
Sd 652
Sd 800
Sd 808
Sd 810
Sd 820
Sd 820A
Sd 835
Sd 845
Sd 850
Sdx20