NetSight
critical9.8

CVE-2015-9122

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MD…

Impact

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, and SD 835, possible buffer overflow if SIM card sends a response greater than 64KB of data for stream APDU command.

Affected products

VendorProductAffected versions
QualcommMdm9206 Firmware
All versions
QualcommMdm9607 Firmware
All versions
QualcommMdm9635m Firmware
All versions
QualcommMdm9640 Firmware
All versions
QualcommMdm9645 Firmware
All versions
QualcommMdm9655 Firmware
All versions
QualcommMsm8909w Firmware
All versions
QualcommSd 210 Firmware
All versions
QualcommSd 212 Firmware
All versions
QualcommSd 205 Firmware
All versions
QualcommSd 400 Firmware
All versions
QualcommSd 410 Firmware
All versions

Weakness classification

References