CVE-2015-9221

EPSS 1.32%
Veröffentlicht 18.04.2018 14:29:08
Zuletzt bearbeitet 21.11.2024 02:40:05
Erkennungen
Login

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 400, SD 800, and SD 810, lack of validation of pointers passed by secure apps could lead to an untrusted pointer dereference.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 5

NVD 3 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Qualcomm ≫ Sd 400 Firmware Version -

Qualcomm ≫ Sd 400 Version -

Qualcomm ≫ Sd 800 Firmware Version -

Qualcomm ≫ Sd 800 Version -

Qualcomm ≫ Sd 810 Firmware Version -

Qualcomm ≫ Sd 810 Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.32%	0.672

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	9.8	3.9	5.9	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

https://source.android.com/security/bulletin/2018-04-01

Vendor Advisory

http://www.securityfocus.com/bid/103671

Third Party Advisory

VDB Entry

https://nvd.nist.gov/vuln/detail/CVE-2015-9221

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2015-9221

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2015-9221

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2015-9221