PT-2018-4529 · Qualcomm+1 · Fsm9055+5

Published 2018-04-18 · Updated 2018-05-09 · CVE-2015-9196

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level

Description The issue is caused by improper input validation in tzbsp ocmem, which can lead to privilege escalation. This affects Qualcomm Snapdragon Mobile and Small Cell SoC FSM9055, MDM9635M, SD 400, and SD 800.

Recommendations For Android versions prior to 2018-04-05 security patch level, update to a version with a security patch level of 2018-04-05 or later to resolve the issue.

Fix

RCE

Weakness Enumeration

CWE-264

CWE-20

Related Identifiers

CVE-2015-9196

Affected Products

Android

Fsm9055

Mdm9635M

Sd 400

Sd 800

Snapdragon Mobile

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2015-9196 · Security Note
• https://source.android.com/security/bulletin/2018-04-01 · Vendor Advisory
• http://securityfocus.com/bid/103671 · Note