Skip to content
OpenAdvisories
Unscored CVE-2015-9190 EUVD-2015-9043GHSA-qg5q-8v76-g9q2

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, MDM9206, MDM9607, M…

Published Apr 18, 2018 · Updated Sep 16, 2024 · Assigned by qualcomm

Vendor: Qualcomm Product: Snapdragon Mobile, Snapdragon Wear

Description

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 600, SD 615/16/SD 415, SD 808, and SD 810, if start_addr + size is too large in boot_clobber_check_local_address_range(), an integer overflow occurs, resulting in clobber protection check being bypassed and SBL memory corruption.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon Mobile, Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 600, SD 615/16/SD 415, SD 808, SD 810 —

References