10
CVE-2015-9115
- EPSS 1.17%
- Veröffentlicht 18.04.2018 14:29:03
- Zuletzt bearbeitet 21.11.2024 02:39:50
- Erkennungen
LoginIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9625, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 820, and SD 820A, no address argument validation is performed on calls to the qsee_prng_getdata syscall.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ Mdm9625 Firmware Version -
Qualcomm ≫ Sd 410 Firmware Version -
Qualcomm ≫ Sd 412 Firmware Version -
Qualcomm ≫ Sd 425 Firmware Version -
Qualcomm ≫ Sd 430 Firmware Version -
Qualcomm ≫ Sd 450 Firmware Version -
Qualcomm ≫ Sd 615 Firmware Version -
Qualcomm ≫ Sd 616 Firmware Version -
Qualcomm ≫ Sd 415 Firmware Version -
Qualcomm ≫ Sd 617 Firmware Version -
Qualcomm ≫ Sd 625 Firmware Version -
Qualcomm ≫ Sd 650 Firmware Version -
Qualcomm ≫ Sd 652 Firmware Version -
Qualcomm ≫ Sd 820 Firmware Version -
Qualcomm ≫ Sd 820a Firmware Version -
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.17% | 0.636 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 9.8 | 3.9 | 5.9 |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| NIST | 10 | 10 | 10 |
AV:N/AC:L/Au:N/C:C/I:C/A:C
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
https://source.android.com/security/bulletin/2018-04-01
http://www.securityfocus.com/bid/103671