PT-2018-4518 · Google · Android

Published 2018-04-18 · Updated 2018-05-09 · CVE-2015-9185

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05

Description The issue arises in Secure DEMUX functions, such as SDMX open session, SDMX close session, and SDMX set session cfg, when parameter validation fails. In this scenario, an error code is written into a response buffer without verifying that the response buffer length (rsplen) passed from HLOS is sufficient to hold the response. This can lead to secure memory corruption if the buffer is located at the end of a non-secure page followed by a secured memory page.

Recommendations For Android versions prior to 2018-04-05, update to a version with a security patch level of 2018-04-05 or later to resolve the issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2015-9185

Affected Products

Android

References · 3

• https://source.android.com/security/bulletin/2018-04-01 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-9185 · Security Note
• http://securityfocus.com/bid/103671 · Note