CVE-2015-9197

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, SD 617, SD 650/52, SD 808, and SD 810, when enabling XPUs for SMEM partitions, if configuration values are out of range, memory access outside the SMEM may occur and set incorrect XPU configurations.

Score

CVSS 3.0 9.8 Critical

Status

Modified - product-security@qualcomm.com

Published

2018-04-18

Last modified

2024-09-16

Weaknesses

CWE-16

Affected products

• Mdm9206 Firmware (Qualcomm)
• Mdm9607 Firmware (Qualcomm)
• Mdm9635m Firmware (Qualcomm)
• Mdm9640 Firmware (Qualcomm)
• Mdm9645 Firmware (Qualcomm)
• Msm8909w Firmware (Qualcomm)
• Sd 205 Firmware (Qualcomm)
• Sd 210 Firmware (Qualcomm)
• Sd 212 Firmware (Qualcomm)
• Sd 400 Firmware (Qualcomm)
• Sd 410 Firmware (Qualcomm)
• Sd 412 Firmware (Qualcomm)
• Sd 415 Firmware (Qualcomm)
• Sd 615 Firmware (Qualcomm)
• Sd 616 Firmware (Qualcomm)
• Sd 617 Firmware (Qualcomm)
• Sd 650 Firmware (Qualcomm)
• Sd 652 Firmware (Qualcomm)
• Sd 808 Firmware (Qualcomm)
• Sd 810 Firmware (Qualcomm)
• Snapdragon Mobile (Qualcomm Inc.)
• Snapdragon Wear (Qualcomm Inc.)

References

• http://www.securityfocus.com/bid/103671
• https://source.android.com/security/bulletin/2018-04-01