In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, and SD 850, Input_address is registered as a shared buffer and is not properly checked before use in OEMCrypto_Generic_Sign(). This allows addresses to be accessed that reside in secure/CP memory.

Project Subscriptions

Vendors Products
Qualcomm Subscribe
Mdm9206 Subscribe
Mdm9206 Firmware Subscribe
Mdm9650 Subscribe
Mdm9650 Firmware Subscribe
Msm8909w Subscribe
Msm8909w Firmware Subscribe
Sd 205 Firmware Subscribe
Sd 210 Firmware Subscribe
Sd 212 Firmware Subscribe
Sd 400 Firmware Subscribe
Sd 410 Firmware Subscribe
Sd 412 Firmware Subscribe
Sd 415 Firmware Subscribe
Sd 425 Firmware Subscribe
Sd 430 Firmware Subscribe
Sd 450 Firmware Subscribe
Sd 615 Firmware Subscribe
Sd 616 Firmware Subscribe
Sd 617 Firmware Subscribe
Sd 625 Firmware Subscribe
Sd 650 Firmware Subscribe
Sd 652 Firmware Subscribe
Sd 800 Firmware Subscribe
Sd 808 Firmware Subscribe
Sd 810 Firmware Subscribe
Sd 820 Firmware Subscribe
Sd 820a Subscribe
Sd 820a Firmware Subscribe
Sd 835 Firmware Subscribe
Sd 845 Firmware Subscribe
Sd 850 Firmware Subscribe
Advisories
Source ID Title
EUVD EUVD EUVD-2015-9029 In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, and SD 850, Input_address is registered as a shared buffer and is not properly checked before use in OEMCrypto_Generic_Sign(). This allows addresses to be accessed that reside in secure/CP memory.
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

No history.

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: qualcomm

Published:

Updated: 2024-09-16T19:00:50.939Z

Reserved: 2017-08-16T00:00:00

Link: CVE-2015-9176

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2018-04-18T14:29:06.357

Modified: 2024-11-21T02:39:58.180

Link: CVE-2015-9176

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses