CVE-2015-9162

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 410/12, SD 617, SD 650/52, SD 800, SD 808, and SD 810, in the…

published April 18, 2018

CVSS
—
EPSS
1%
Percentile
64.3
In the wild
Unconfirmed
What it is

⚠️ Memory mishaps in mobile devices can lead to unexpected chaos! In Qualcomm Snapdragon chips, memory allocation failures might not be handled properly, leaving pointers pointing to nowhere. 🤯 Think of it like a restaurant that serves food without checking if the kitchen has what it needs first — if the order falls through the cracks, the chef might just toss the old order and keep the same ticket open, creating confusion! This vulnerability could allow apps to mistakenly access freed memory, potentially leading to crashes or unpredictable behavior. While the risk may not be immediately catastrophic, it opens the door for further complications should malicious code find its way in.

Put simply

Think of it like a restaurant that serves food without checking if the kitchen has what it needs first — if the order falls through the cracks, the chef might just toss the old order and keep the same ticket open, creating confusion! In devices running Android before the April 2018 patch, the `Certificate_CreateWithBuffer` function in the QSEE app fails to nullify pointers after freeing memory during allocation failures, risking memory corruption issues.

What to do

This vulnerability could allow apps to mistakenly access freed memory, potentially leading to crashes or unpredictable behavior. While the risk may not be immediately catastrophic, it opens the door for further complications should malicious code find its way in. Update your Qualcomm Snapdragon device to the latest security patch to close this vulnerability. Ensure any affected apps are also updated to mitigate potential risks. Regularly check for security updates to stay ahead! You've got this! With the right updates, you can keep your device safe and sound! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01069 · 64.3th percentile
Published
2018-04-18T14:00Z
EPSS history
Timeline
  • 18 APR 14:00Z
    In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 410/12, SD 617, SD 650/52, SD 800, SD 808, and SD 810, in the…
    cvelistv5