Not rated
CVE-2015-9179 In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MSM8974, lack of length…
Description
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MSM8974, lack of length checking in OEMCrypto_DeriveKeysFromSessionKey() could lead to a buffer overflow vulnerability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Snapdragon Mobile | Versions not published |
Other CVEs of Snapdragon Mobile
The 114 CVEs of Snapdragon Mobile →
CVE-2022-25691
Denial of service in Modem due to reachable assertion while processing SIB1 with invalid SCS and bandwidth settings in…
7.5
High
CVE-2022-25673
Denial of service in MODEM due to reachable assertion while processing configuration from network in Snapdragon Mobile
7.5
High
CVE-2022-25689
Denial of service in Modem due to reachable assertion in Snapdragon Mobile
7.5
High
CVE-2022-25672
Denial of service in MODEM due to reachable assertion while processing SIB1 with invalid Bandwidth in Snapdragon Mobile
7.5
High