PT-2018-4499 · Qualcomm+1 · Sd 808+20
Published
2018-04-18
·
Updated
2018-05-09
·
CVE-2015-9165
CVSS v2.0
10
High
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Android versions prior to 2018-04-05 security patch level
Description
The issue is related to incorrect error handling that could lead to a double free in the QTEE file service API. This affects Android on various Qualcomm Snapdragon Mobile and Snapdragon Wear devices, including IPQ4019, MDM9206, MDM9607, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, SD 617, SD 650/52, SD 808, and SD 810.
Recommendations
For Android versions prior to 2018-04-05 security patch level, update to a version with a security patch level of 2018-04-05 or later to resolve the issue.
Fix
Double Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Android
Ipq4019
Mdm9206
Mdm9607
Msm8909W
Qualcomm Snapdragon Mobile
Qualcomm Snapdragon Wear
Sd 205
Sd 210
Sd 212
Sd 400
Sd 410
Sd 412
Sd 415
Sd 615
Sd 616
Sd 617
Sd 650
Sd 652
Sd 808
Sd 810