CVE-2015-9174

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 410/12, SD 617, SD 650/52, SD 800, SD 808, and SD 810, lack of…

published April 18, 2018

CVSS
—
EPSS
1%
Percentile
69.0
In the wild
Unconfirmed
What it is

⚠️ A memory overwrite in Qualcomm's QSEE apps could be a sneaky backdoor for attackers pre-2018! 🛡️ Think of it like a construction site where a builder puts up walls without checking the blueprints. If a crucial section is overlooked, it could lead to structural collapse later—just like this flaw could cause data corruption in your device. An attacker could exploit this memory overwrite to tamper with sensitive data or create instability in the QSEE applications. It's like giving someone access to rearrange the furniture in your home without you knowing—definitely unsettling!

Put simply

Think of it like a construction site where a builder puts up walls without checking the blueprints. If a crucial section is overlooked, it could lead to structural collapse later—just like this flaw could cause data corruption in your device. This vulnerability arises from a lack of validation of the return value before allocating a buffer in Qualcomm's QSEE applications, which may result in overwriting critical memory areas.

What to do

An attacker could exploit this memory overwrite to tamper with sensitive data or create instability in the QSEE applications. It's like giving someone access to rearrange the furniture in your home without you knowing—definitely unsettling! If you're using affected devices or versions, make sure to update to the latest security patch released after April 5, 2018. Regularly check for system updates and ensure your devices are running on the safest available firmware. You've got this! Stay vigilant with updates and your devices will stay secure. 🚀

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01252 · 69.0th percentile
Published
2018-04-18T14:00Z
EPSS history
Timeline
  • 18 APR 14:00Z
    In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 410/12, SD 617, SD 650/52, SD 800, SD 808, and SD 810, lack of…
    cvelistv5