CVE-2015-9135

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9625, MDM9635M, MDM9640, MDM9645, MSM8909W…

published April 18, 2018

CVSS
—
EPSS
1%
Percentile
67.4
In the wild
Unconfirmed
What it is

⚠️ An untrusted pointer dereference on certain Qualcomm Snapdragon devices might sound technical, but it opens a door to some serious vulnerabilities! 🔥 Think of it like a restaurant that serves food without checking the ingredients first; if an untrusted supplier drops off a mystery box, who knows what you'll end up with on your plate? If exploited, this vulnerability could let a malicious app access sensitive data or execute arbitrary code on your device, potentially compromising everything from personal information to device integrity. Talk about a recipe for disaster!

Put simply

Think of it like a restaurant that serves food without checking the ingredients first; if an untrusted supplier drops off a mystery box, who knows what you'll end up with on your plate? The flaw resides in the QTEE syscall handler found in various Qualcomm Snapdragon mobile devices, leading to unsafe memory access when an untrusted pointer is dereferenced.

What to do

If exploited, this vulnerability could let a malicious app access sensitive data or execute arbitrary code on your device, potentially compromising everything from personal information to device integrity. Talk about a recipe for disaster! To remediate this, update your device to the latest security patch level from April 2018 or later. Check your device manufacturer's support page for any available updates. Stay proactive! You've got this! Stay updated and protect your device like a true security hero! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01185 · 67.4th percentile
Published
2018-04-18T14:00Z
EPSS history
Timeline
  • 18 APR 14:00Z
    In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9625, MDM9635M, MDM9640, MDM9645, MSM8909W…
    cvelistv5