CVE-2015-9173

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 410/12, SD 617, SD 650/52, SD 800, SD 808, and SD 810, missing of…

published April 18, 2018

CVSS
—
EPSS
1%
Percentile
67.0
In the wild
Unconfirmed
What it is

⚠️ There's a sneaky memory corruption vulnerability lurking in some Snapdragon processors! 🦸 Think of it as a recipe that skips checking the ingredients before cooking — you might end up with a mess in the kitchen if something goes wrong! 📦 This vulnerability can lead to memory corruption in the TQS App, which could cause unexpected behavior, crashes, or even data leakage. While it hasn't been exploited yet, it's crucial to address it before it becomes a problem.

Put simply

Think of it as a recipe that skips checking the ingredients before cooking — you might end up with a mess in the kitchen if something goes wrong! 📦 In certain Qualcomm Snapdragon mobile chipsets, a missing return value check in the memscpy function allows memory corruption to occur, creating potential instability in applications that rely on it.

What to do

This vulnerability can lead to memory corruption in the TQS App, which could cause unexpected behavior, crashes, or even data leakage. While it hasn't been exploited yet, it's crucial to address it before it becomes a problem. To protect yourself, ensure you're running a device with the security patch level updated to 2018-04-05 or later. If you're a developer, review your apps for dependencies on affected Snapdragon models and test for this vulnerability. You've got this! By staying proactive, you can keep your device and applications secure! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01164 · 67.0th percentile
Published
2018-04-18T14:00Z
EPSS history
Timeline
  • 18 APR 14:00Z
    In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 410/12, SD 617, SD 650/52, SD 800, SD 808, and SD 810, missing of…
    cvelistv5