Back to feed
EUVD-2015-8994 · Published Apr 18, 2018
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 615/16/SD 415, SD 617, SD 800, SD 808, and SD 810, in HHO scenarios, during the ACQ procedure, there are possible instances where the search database is incorrectly updated resulting in memory corruption due to buffer overflow.
Technologies
Qualcomm Mdm9635MQualcomm Sd 800Qualcomm Sd 615 FirmwareQualcomm Mdm9206 FirmwareQualcomm Sd 810Qualcomm Msm8909WQualcomm Sd 415Qualcomm Sd 410 FirmwareQualcomm Sd 412 FirmwareQualcomm Sd 615Qualcomm Mdm9206Qualcomm Mdm9635M FirmwareQualcomm Sd 430 FirmwareQualcomm Sd 212 FirmwareQualcomm Sd 212Qualcomm Msm8909W FirmwareQualcomm Sd 616Qualcomm Sd 412Qualcomm Sd 425 FirmwareQualcomm Sd 808Qualcomm Sd 400Qualcomm Sd 205Qualcomm Sd 616 FirmwareQualcomm Sd 810 FirmwareQualcomm Sd 400 FirmwareQualcomm Sd 617Qualcomm Sd 800 FirmwareQualcomm Sd 210Qualcomm Sd 205 FirmwareQualcomm Mdm9607 FirmwareQualcomm Sd 210 FirmwareQualcomm Sd 617 FirmwareQualcomm Sd 808 FirmwareQualcomm Sd 430Qualcomm Sd 410Qualcomm Sd 415 FirmwareQualcomm Sd 425Qualcomm Mdm9607
Weaknesses
CWE-119
CVSS scores
- v3.09.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - v2.010.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
Potentially impacted assets
See if this affects your attack surface
