CVE-2015-9038
CriticalSummary
All Qualcomm products with Android releases from CAF using the Linux kernel may have a NULL pointer dereference issue in the front end.
Risk Assessment
This may lead to application or system crashes, posing a risk to the stability and security of devices.
Recommendation
It is recommended to update to the latest software versions that address this issue.
Other vulnerabilities in Produkty Qualcomm z Androidem od CAF korzystające z jądra Linux
See all- CVE-2017-11041High
All Qualcomm products with Android releases from CAF using the Linux kernel have an issue where an output buffer is accessed in one thread and can be potentially freed in another.
- CVE-2016-5871Critical
All Qualcomm products with Android releases from CAF using the Linux kernel have an integer overflow to buffer overflow vulnerability when loading an image file.
- CVE-2016-10387Critical
All Qualcomm products with Android releases from CAF using the Linux kernel may be vulnerable to an assertion that could be reachable in a handover scenario.
- CVE-2016-10381Critical
All Qualcomm products with Android releases from CAF using the Linux kernel are vulnerable to an issue where the UE can send unprotected MeasurementReports revealing UE location.
- CVE-2016-10380Critical
All Qualcomm products with Android releases from CAF using the Linux kernel are vulnerable to revealing the end user's (UE) location through unprotected MeasurementReports.
- CVE-2015-9062Critical
All Qualcomm products with Android releases from CAF using the Linux kernel have an integer overflow to buffer overflow vulnerability when loading an ELF file.
- CVE-2015-9054Critical
All Qualcomm products with Android releases from CAF using the Linux kernel may have a NULL pointer dereference issue during GAL decoding.
- CVE-2015-9053Critical
All Qualcomm products with Android releases from CAF using the Linux kernel have a buffer overflow vulnerability in the processing of certain responses from the USIM.
- CVE-2015-9050Critical
All Qualcomm products with Android releases from CAF using the Linux kernel have a vulnerability that allows for out of bounds array access during a CA call.
- CVE-2015-9048Critical
All Qualcomm products with Android releases from CAF using the Linux kernel have a vulnerability in the processing of lost RTP packets.
Original NVD description (English source)
In all Qualcomm products with Android releases from CAF using the Linux kernel, a NULL pointer may be dereferenced in the front end.