ID CVE-2015-9215
Summary In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, MDM9635M, and SD 810, improper input validation can cause a null pointer dereference in USB bootloader find_ep() function.
References
Vulnerable Configurations
  • cpe:2.3:o:qualcomm:mdm9615_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:qualcomm:mdm9615_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:mdm9615:-:*:*:*:*:*:*:*
    cpe:2.3:h:qualcomm:mdm9615:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:mdm9625_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:qualcomm:mdm9625_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:mdm9625:-:*:*:*:*:*:*:*
    cpe:2.3:h:qualcomm:mdm9625:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:mdm9635m_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:qualcomm:mdm9635m_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:mdm9635m:-:*:*:*:*:*:*:*
    cpe:2.3:h:qualcomm:mdm9635m:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:sd_810_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:qualcomm:sd_810_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:sd_810:-:*:*:*:*:*:*:*
    cpe:2.3:h:qualcomm:sd_810:-:*:*:*:*:*:*:*
CVSS
Base: 10.0 (as of 01-05-2018 - 20:42)
Impact:
Exploitability:
CWE CWE-476
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:N/AC:L/Au:N/C:C/I:C/A:C
refmap via4
bid 103671
confirm https://source.android.com/security/bulletin/2018-04-01
Last major update 01-05-2018 - 20:42
Published 18-04-2018 - 14:29
Last modified 01-05-2018 - 20:42
Back to Top