CVE-2015-9046

In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in LTE where an assertion can be reached due to an…

published August 18, 2017

CVSS
—
EPSS
1%
Percentile
59.1
In the wild
Unconfirmed
What it is

⚠️ An improper bound on a frequency list in Qualcomm's LTE can lead to unexpected assertions — like a train conductor not checking the passenger list before departure! Think of a frequency list as a restaurant menu. If the kitchen doesn't check what’s actually available and takes orders for items that aren't on the list, diners might end up with something surprising or even empty plates! This vulnerability could potentially cause unexpected behavior in the LTE service, leading to disruptions or crashes. While it's not actively exploited, the risk of erratic functionality is still something to keep an eye on.

Put simply

Think of a frequency list as a restaurant menu. If the kitchen doesn't check what’s actually available and takes orders for items that aren't on the list, diners might end up with something surprising or even empty plates! In Qualcomm products running an Android release using the Linux kernel, the flaw arises from an assertion that can be triggered due to improper handling of the frequency list's size, which leads to unpredictable outcomes.

What to do

This vulnerability could potentially cause unexpected behavior in the LTE service, leading to disruptions or crashes. While it's not actively exploited, the risk of erratic functionality is still something to keep an eye on. Although active exploitation is not reported, it's wise to monitor for any firmware updates from Qualcomm. Regularly check support forums or official communications for guidance on patching or mitigating this issue. You've got this! Stay updated and keep your systems humming smoothly! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00895 · 59.1th percentile
Published
2017-08-18T18:00Z
EPSS history
Timeline
  • 18 AUG 18:00Z
    In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in LTE where an assertion can be reached due to an…
    cvelistv5