CVE-2015-9194

CVE-2015-9194: vulnerability in Qualcomm, Inc. Snapdragon Mobile

Published · Updated

Follow this CVE+ Monitor Snapdragon Mobile

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.8%
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 210/SD 212/SD 205, SD 400, SD 425, SD 427, SD 430, SD 435, SD 450, SD 617, SD 625, SD 650/52, SD 800, SD 845, and Snapdragon_High_Med_2016, during module load at TZ Startup, memory statically allocated by modules was not being properly set to zero first. Allowing the module to execute without reset gives it access to information from previous app thus leading to information exposure.
Affected products
Qualcomm, Inc. · Snapdragon Mobile
Related CVEs — Qualcomm, Inc. Snapdragon Mobile

In the same product, most dangerous first.

CVE-2017-14915—CVE-2017-14915EPSS 1.6%CVE-2015-9219—CVE-2015-9219EPSS 1.4%CVE-2015-9150—CVE-2015-9150EPSS 1.4%CVE-2016-10496—CVE-2016-10496EPSS 1.4%CVE-2015-9215—CVE-2015-9215EPSS 1.4%CVE-2015-9179—CVE-2015-9179EPSS 1.4%