10
CVE-2015-9191
- EPSS 1.25%
- Veröffentlicht 18.04.2018 14:29:07
- Zuletzt bearbeitet 21.11.2024 02:40:00
- Erkennungen
LoginIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 617, SD 650/52, SD 808, SD 810, and SDX20, in a QTEE syscall handler, an untrusted pointer dereference can occur.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ Mdm9206 Firmware Version -
Qualcomm ≫ Mdm9607 Firmware Version -
Qualcomm ≫ Mdm9635m Firmware Version -
Qualcomm ≫ Mdm9640 Firmware Version -
Qualcomm ≫ Mdm9645 Firmware Version -
Qualcomm ≫ Mdm9650 Firmware Version -
Qualcomm ≫ Mdm9655 Firmware Version -
Qualcomm ≫ Msm8909w Firmware Version -
Qualcomm ≫ Sd 210 Firmware Version -
Qualcomm ≫ Sd 212 Firmware Version -
Qualcomm ≫ Sd 205 Firmware Version -
Qualcomm ≫ Sd 400 Firmware Version -
Qualcomm ≫ Sd 410 Firmware Version -
Qualcomm ≫ Sd 412 Firmware Version -
Qualcomm ≫ Sd 617 Firmware Version -
Qualcomm ≫ Sd 650 Firmware Version -
Qualcomm ≫ Sd 652 Firmware Version -
Qualcomm ≫ Sd 808 Firmware Version -
Qualcomm ≫ Sd 810 Firmware Version -
Qualcomm ≫ Sdx20 Firmware Version -
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.25% | 0.656 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 9.8 | 3.9 | 5.9 |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| NIST | 10 | 10 | 10 |
AV:N/AC:L/Au:N/C:C/I:C/A:C
|
CWE-476 NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.
https://source.android.com/security/bulletin/2018-04-01
http://www.securityfocus.com/bid/103671