10

CVE-2015-9220

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, IPQ8064, MDM9206, MDM9607, MDM9640, MDM9650, QCA4531, QCA6174A, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9378, QCA9379, QCA9558, QCA9880, QCA9886, QCA9980, SD 210/SD 212/SD 205, SD 425, SD 625, SD 810, SD 820, and SDX20, integer overflow occurs when the size of the firmware section is incorrectly encoded in the firmware image.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ Mdm9206 Firmware Version -
   Qualcomm ≫ Mdm9206 Version -
Qualcomm ≫ Mdm9607 Firmware Version -
   Qualcomm ≫ Mdm9607 Version -
Qualcomm ≫ Ipq4019 Firmware Version -
   Qualcomm ≫ Ipq4019 Version -
Qualcomm ≫ Ipq8064 Firmware Version -
   Qualcomm ≫ Ipq8064 Version -
Qualcomm ≫ Qca4531 Firmware Version -
   Qualcomm ≫ Qca4531 Version -
Qualcomm ≫ Mdm9640 Firmware Version -
   Qualcomm ≫ Mdm9640 Version -
Qualcomm ≫ Qca6174a Firmware Version -
   Qualcomm ≫ Qca6174a Version -
Qualcomm ≫ Mdm9650 Firmware Version -
   Qualcomm ≫ Mdm9650 Version -
Qualcomm ≫ Qca6574au Firmware Version -
   Qualcomm ≫ Qca6574au Version -
Qualcomm ≫ Qca6584 Firmware Version -
   Qualcomm ≫ Qca6584 Version -
Qualcomm ≫ Sd 210 Firmware Version -
   Qualcomm ≫ Sd 210 Version -
Qualcomm ≫ Sd 212 Firmware Version -
   Qualcomm ≫ Sd 212 Version -
Qualcomm ≫ Sd 205 Firmware Version -
   Qualcomm ≫ Sd 205 Version -
Qualcomm ≫ Qca6584au Firmware Version -
   Qualcomm ≫ Qca6584au Version -
Qualcomm ≫ Qca9377 Firmware Version -
   Qualcomm ≫ Qca9377 Version -
Qualcomm ≫ Qca9378 Firmware Version -
   Qualcomm ≫ Qca9378 Version -
Qualcomm ≫ Sd 425 Firmware Version -
   Qualcomm ≫ Sd 425 Version -
Qualcomm ≫ Qca9379 Firmware Version -
   Qualcomm ≫ Qca9379 Version -
Qualcomm ≫ Qca9558 Firmware Version -
   Qualcomm ≫ Qca9558 Version -
Qualcomm ≫ Qca9880 Firmware Version -
   Qualcomm ≫ Qca9880 Version -
Qualcomm ≫ Qca9886 Firmware Version -
   Qualcomm ≫ Qca9886 Version -
Qualcomm ≫ Qca9980 Firmware Version -
   Qualcomm ≫ Qca9980 Version -
Qualcomm ≫ Sd 625 Firmware Version -
   Qualcomm ≫ Sd 625 Version -
Qualcomm ≫ Sd 810 Firmware Version -
   Qualcomm ≫ Sd 810 Version -
Qualcomm ≫ Sd 820 Firmware Version -
   Qualcomm ≫ Sd 820 Version -
Qualcomm ≫ Sdx20 Firmware Version -
   Qualcomm ≫ Sdx20 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.31% 0.67
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.8 3.9 5.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-190 Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

https://source.android.com/security/bulletin/2018-04-01
Vendor Advisory
http://www.securityfocus.com/bid/103671
Third Party Advisory
VDB Entry