NetSight
critical9.8

CVE-2015-9133

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 400, SD 410/12, SD 617, SD 650/52, SD 800, and SD 810, if Widevin…

Impact

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 400, SD 410/12, SD 617, SD 650/52, SD 800, and SD 810, if Widevine App TZ_WV_CMD_DECRYPT_VIDEO is called with a size too large, an integer overflow may occur.

Affected products

VendorProductAffected versions
QualcommSd 400 Firmware
All versions
QualcommSd 410 Firmware
All versions
QualcommSd 412 Firmware
All versions
QualcommSd 617 Firmware
All versions
QualcommSd 650 Firmware
All versions
QualcommSd 652 Firmware
All versions
QualcommSd 800 Firmware
All versions
QualcommSd 810 Firmware
All versions

Weakness classification

References