CVE-2015-9122

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645โ€ฆ

published April 18, 2018

CVSS
โ€”
EPSS
1%
Percentile
71.9
In the wild
Unconfirmed
What it is

โš ๏ธ A buffer overflow vulnerability lurks in Qualcomm Snapdragon devices, triggered by an oversized response from a SIM card! ๐Ÿ“ฑ Think of it like a waiter at a restaurant who just keeps serving plates without checking if there's any room left at the table โ€” eventually, things start spilling over! An attacker could exploit this overflow to inject malicious code, potentially leading to unexpected crashes or even control over the device. That's like giving an intruder access to a locked pantry full of snacks โ€” they could cause a mess or take what they want!

Put simply

Think of it like a waiter at a restaurant who just keeps serving plates without checking if there's any room left at the table โ€” eventually, things start spilling over! This vulnerability in Qualcomm Snapdragon allows a buffer overflow when the SIM card sends a response exceeding 64KB for a stream APDU command, creating a chance for attackers to execute unwanted code.

What to do

An attacker could exploit this overflow to inject malicious code, potentially leading to unexpected crashes or even control over the device. That's like giving an intruder access to a locked pantry full of snacks โ€” they could cause a mess or take what they want! To protect your device, ensure it's updated to the security patch level from April 5, 2018, or later. If you're using affected Snapdragon models, check with your device manufacturer for any recommended updates. ๐Ÿ›ก๏ธ You've got this! Stay vigilant and keep your device secure! ๐Ÿš€

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01379 ยท 71.9th percentile
Published
2018-04-18T14:00Z
EPSS history
Timeline
  • 18 APR 14:00Z
    In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645โ€ฆ
    cvelistv5