CVE-2015-9179

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MSM8974, lack of length checking in OEMCrypto_DeriveKeysFromSessionKey() could lead to a buffer overflow vulnerability.
References
Link Resource
https://source.android.com/security/bulletin/2018-04-01 Vendor Advisory
http://www.securityfocus.com/bid/103671 Third Party Advisory VDB Entry
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:qualcomm:msm8974_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:msm8974:-:*:*:*:*:*:*:*

Information

Published : 2018-04-18 07:29

Updated : 2018-05-09 08:26


NVD link : CVE-2015-9179

Mitre link : CVE-2015-9179


JSON object : View

CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Advertisement

dedicated server usa

Products Affected

qualcomm

  • msm8974
  • msm8974_firmware