CVE-2015-9183 Integer overflow in Snapdragon Mobile
An integer overflow in Qualcomm Snapdragon firmware allows attackers to trigger a buffer overflow, potentially leading to code execution.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2015-9183?
CVE-2015-9183 is a critical vulnerability in Qualcomm Sd 410 Firmware, published on 18 Apr 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 410/12, SD 617, SD 650/52, SD 800, SD 808, and SD 810, in TQS QSEE application, while parsing "Set Certificates" command an integer overflow may result in buffer overflow.
Which versions are affected by CVE-2015-9183?
It affects 8 products.
Products include Qualcomm Sd 410 Firmware, Qualcomm Sd 412 Firmware, Qualcomm Sd 617 Firmware, Qualcomm Sd 650 Firmware, Qualcomm Sd 652 Firmware, Qualcomm Sd 800 Firmware and 2 more.
How do I fix CVE-2015-9183?
No fix has been published for CVE-2015-9183 yet. Limit exposure of the affected software until one is available.
Is CVE-2015-9183 being exploited?
There is no known exploitation of CVE-2015-9183 in the wild and no public exploit code.
Other vulnerabilities in Qualcomm Sd 410 Firmware
- CVE-2015-9162 Null dereference in Snapdragon Mobile
- CVE-2015-9167 Integer overflow in Snapdragon Automobile, Snapdragon Mobile
- CVE-2015-9173 Memory corruption in Snapdragon Mobile
- CVE-2015-9174 Memory corruption in Snapdragon Mobile
- CVE-2016-10426 Memory corruption in Snapdragon Automobile, Snapdragon Mobile
Sources
Also known as GHSA-x93f-wj88-xr7v.