// For flags

CVE-2015-9199

 

Severity Score

9.8
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile IPQ4019, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, SD 800, SD 808, SD 810, SD 820, and SD 820A, A non-secure region check is done while registering QSEE buffer address which is passed by HLOS but not while logging in the QSEE buffer, so corruption of dynamically protected secure region can occur if the non-secure buffer is changed between the time it's checked and when it's used.

En Android, antes del nivel de parche de seguridad del 2018-04-05 o antes en Qualcomm Snapdragon Automobile and Snapdragon Mobile IPQ4019, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, SD 800, SD 808, SD 810, SD 820 y SD 820A, se realiza una comprobación de una región no segura mientras se registra una dirección de búfer QSEE pasada por HLOS, pero no mientras se registra en el búfer QSEE. Esto significa que la región segura protegida dinámicamente se puede corromper si el búfer no seguro se cambia entre el tiempo en el que se comprueba y cuando se usa.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
Complete
Integrity
Complete
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2017-08-16 CVE Reserved
  • 2018-04-18 CVE Published
  • 2023-09-09 EPSS Updated
  • 2024-09-16 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (2)
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Qualcomm
Search vendor "Qualcomm"
Ipq4019 Firmware
Search vendor "Qualcomm" for product "Ipq4019 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Ipq4019
Search vendor "Qualcomm" for product "Ipq4019"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Mdm9625 Firmware
Search vendor "Qualcomm" for product "Mdm9625 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Mdm9625
Search vendor "Qualcomm" for product "Mdm9625"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Mdm9635m Firmware
Search vendor "Qualcomm" for product "Mdm9635m Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Mdm9635m
Search vendor "Qualcomm" for product "Mdm9635m"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Mdm9640 Firmware
Search vendor "Qualcomm" for product "Mdm9640 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Mdm9640
Search vendor "Qualcomm" for product "Mdm9640"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Mdm9650 Firmware
Search vendor "Qualcomm" for product "Mdm9650 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Mdm9650
Search vendor "Qualcomm" for product "Mdm9650"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Mdm9655 Firmware
Search vendor "Qualcomm" for product "Mdm9655 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Mdm9655
Search vendor "Qualcomm" for product "Mdm9655"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 210 Firmware
Search vendor "Qualcomm" for product "Sd 210 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 210
Search vendor "Qualcomm" for product "Sd 210"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 212 Firmware
Search vendor "Qualcomm" for product "Sd 212 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 212
Search vendor "Qualcomm" for product "Sd 212"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 205 Firmware
Search vendor "Qualcomm" for product "Sd 205 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 205
Search vendor "Qualcomm" for product "Sd 205"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 400 Firmware
Search vendor "Qualcomm" for product "Sd 400 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 400
Search vendor "Qualcomm" for product "Sd 400"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 410 Firmware
Search vendor "Qualcomm" for product "Sd 410 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 410
Search vendor "Qualcomm" for product "Sd 410"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 412 Firmware
Search vendor "Qualcomm" for product "Sd 412 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 412
Search vendor "Qualcomm" for product "Sd 412"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 615 Firmware
Search vendor "Qualcomm" for product "Sd 615 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 615
Search vendor "Qualcomm" for product "Sd 615"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 616 Firmware
Search vendor "Qualcomm" for product "Sd 616 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 616
Search vendor "Qualcomm" for product "Sd 616"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 415 Firmware
Search vendor "Qualcomm" for product "Sd 415 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 415
Search vendor "Qualcomm" for product "Sd 415"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 800 Firmware
Search vendor "Qualcomm" for product "Sd 800 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 800
Search vendor "Qualcomm" for product "Sd 800"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 808 Firmware
Search vendor "Qualcomm" for product "Sd 808 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 808
Search vendor "Qualcomm" for product "Sd 808"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 810 Firmware
Search vendor "Qualcomm" for product "Sd 810 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 810
Search vendor "Qualcomm" for product "Sd 810"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 820 Firmware
Search vendor "Qualcomm" for product "Sd 820 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 820
Search vendor "Qualcomm" for product "Sd 820"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 820a Firmware
Search vendor "Qualcomm" for product "Sd 820a Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 820a
Search vendor "Qualcomm" for product "Sd 820a"
--
Safe