CVE-2015-9190

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9615, MDM9625…

published April 18, 2018

CVSS
—
EPSS
1%
Percentile
68.0
In the wild
Unconfirmed
What it is

⚠️ A puzzling integer overflow lurks in boot checks for Qualcomm Snapdragon devices, allowing for potential memory mishaps! Think of it like a restaurant that accidentally overbooks a table, leading to guests being seated in the kitchen — crucial checks are skipped, and chaos ensues instead of a smooth dining experience. This vulnerability could lead to serious memory corruption, which might allow malicious actors to manipulate the device's behavior or even gain unauthorized access. While currently not known to be exploited, the implications could be severe if left unaddressed.

Put simply

Think of it like a restaurant that accidentally overbooks a table, leading to guests being seated in the kitchen — crucial checks are skipped, and chaos ensues instead of a smooth dining experience. In Qualcomm Snapdragon devices prior to the April 2018 security patch, an integer overflow in the boot_clobber_check_local_address_range() function could bypass clobber protection checks, leading to potential memory corruption.

What to do

This vulnerability could lead to serious memory corruption, which might allow malicious actors to manipulate the device's behavior or even gain unauthorized access. While currently not known to be exploited, the implications could be severe if left unaddressed. Update your Snapdragon device to the latest firmware that includes the security patch from April 2018 or later. Additionally, monitor for any future updates that address security vulnerabilities and apply them promptly. You've got this! Keep your devices secure and up to date to maintain peace of mind. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01210 · 68.0th percentile
Published
2018-04-18T14:00Z
EPSS history
Timeline
  • 18 APR 14:00Z
    In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9615, MDM9625…
    cvelistv5