Back to feed
EUVD-2015-8988 · Published Apr 18, 2018
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9625, MDM9635M, MDM9640, MDM9645, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, SD 617, SD 650/52, SD 800, SD 808, and SD 810, in a QTEE syscall handler, an untrusted pointer dereference can occur.
Technologies
Qualcomm Sd 650Qualcomm Mdm9640 FirmwareQualcomm Mdm9635MQualcomm Sd 652 FirmwareQualcomm Sd 800Qualcomm Sd 615 FirmwareQualcomm Sd 810Qualcomm Msm8909WQualcomm Sd 415Qualcomm Mdm9625Qualcomm Sd 410 FirmwareQualcomm Sd 412 FirmwareQualcomm Sd 615Qualcomm Mdm9635M FirmwareQualcomm Sd 212 FirmwareQualcomm Sd 212Qualcomm Msm8909W FirmwareQualcomm Sd 616Qualcomm Sd 412Qualcomm Sd 808Qualcomm Sd 650 FirmwareQualcomm Sd 400Qualcomm Sd 205Qualcomm Sd 616 FirmwareQualcomm Sd 652Qualcomm Mdm9645Qualcomm Sd 400 FirmwareQualcomm Sd 617Qualcomm Sd 810 FirmwareQualcomm Sd 800 FirmwareQualcomm Sd 210Qualcomm Sd 205 FirmwareQualcomm Sd 210 FirmwareQualcomm Mdm9625 FirmwareQualcomm Sd 617 FirmwareQualcomm Mdm9640Qualcomm Mdm9645 FirmwareQualcomm Sd 808 FirmwareQualcomm Sd 410Qualcomm Sd 415 Firmware
Weaknesses
CWE-476
CVSS scores
- v3.09.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - v2.010.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
Potentially impacted assets
See if this affects your attack surface
