CVE-2015-9167

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 410/12, SD 425, SD 430, SD 450, SD 600…

published April 18, 2018

CVSS
—
EPSS
1%
Percentile
67.4
In the wild
Unconfirmed
What it is

⚠️ An integer underflow hiding in Qualcomm’s EMM commands could lead to unexpected behavior! 🌪️ This vulnerability affects various Snapdragon chips used in Android devices before April 2018. Think of it like a vending machine that gets confused if you input a number too low, potentially resulting in it dispensing more snacks than intended — suddenly, you’ve got a mountain of chips! If exploited, this underflow can cause erratic system behavior, which may compromise device stability or functionality. While there are no known exploits yet, the potential for issues in critical systems (like those in automobiles) should not be underestimated!

Put simply

Think of it like a vending machine that gets confused if you input a number too low, potentially resulting in it dispensing more snacks than intended — suddenly, you’ve got a mountain of chips! This vulnerability arises from an integer underflow in the EMM command processing of Qualcomm Snapdragon chips, allowing the system to misinterpret command parameters and potentially lead to irregular operations.

What to do

If exploited, this underflow can cause erratic system behavior, which may compromise device stability or functionality. While there are no known exploits yet, the potential for issues in critical systems (like those in automobiles) should not be underestimated! Android users should ensure their devices are updated to the latest security patch level. Manufacturers utilizing these Snapdragon chips must prioritize firmware updates and monitor for any unusual behavior in affected devices. You’ve got this! Stay updated and keep your devices running smoothly! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01185 · 67.4th percentile
Published
2018-04-18T14:00Z
EPSS history
Timeline
  • 18 APR 14:00Z
    In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 410/12, SD 425, SD 430, SD 450, SD 600…
    cvelistv5