CVE-2015-9183 in Android

Sumário

de MITRE

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 410/12, SD 617, SD 650/52, SD 800, SD 808, and SD 810, in TQS QSEE application, while parsing "Set Certificates" command an integer overflow may result in buffer overflow.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Reservar: 16/08/2017
• Divulgação: 18/04/2018
• Moderação: aceite
• Entrada: VDB-116429
• CPE: pronto
• CWE: CWE-190 (confirmado)
• CVSS: 9.8 (NVD)
• EPSS: 0.01044
• KEV: não
• Atividades: muito baixo
• Sector: Insurance, Police, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2015-9183
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2015-9183
• CVE Details: https://www.cvedetails.com/cve/CVE-2015-9183/