CVE-2015-9050
CriticalSummary
All Qualcomm products with Android releases from CAF using the Linux kernel have a vulnerability that allows for out of bounds array access during a CA call.
Risk Assessment
This vulnerability may lead to unauthorized memory access, potentially resulting in serious security issues on mobile devices.
Recommendation
It is recommended to update the software to the latest version to mitigate the risks associated with this vulnerability.
Other vulnerabilities in Produkty Qualcomm z Androidem od CAF korzystające z jądra Linux
See all- CVE-2017-11041High
All Qualcomm products with Android releases from CAF using the Linux kernel have an issue where an output buffer is accessed in one thread and can be potentially freed in another.
- CVE-2016-5871Critical
All Qualcomm products with Android releases from CAF using the Linux kernel have an integer overflow to buffer overflow vulnerability when loading an image file.
- CVE-2016-10387Critical
All Qualcomm products with Android releases from CAF using the Linux kernel may be vulnerable to an assertion that could be reachable in a handover scenario.
- CVE-2016-10381Critical
All Qualcomm products with Android releases from CAF using the Linux kernel are vulnerable to an issue where the UE can send unprotected MeasurementReports revealing UE location.
- CVE-2016-10380Critical
All Qualcomm products with Android releases from CAF using the Linux kernel are vulnerable to revealing the end user's (UE) location through unprotected MeasurementReports.
- CVE-2015-9062Critical
All Qualcomm products with Android releases from CAF using the Linux kernel have an integer overflow to buffer overflow vulnerability when loading an ELF file.
- CVE-2015-9054Critical
All Qualcomm products with Android releases from CAF using the Linux kernel may have a NULL pointer dereference issue during GAL decoding.
- CVE-2015-9053Critical
All Qualcomm products with Android releases from CAF using the Linux kernel have a buffer overflow vulnerability in the processing of certain responses from the USIM.
- CVE-2015-9048Critical
All Qualcomm products with Android releases from CAF using the Linux kernel have a vulnerability in the processing of lost RTP packets.
- CVE-2015-9043Critical
All Qualcomm products with Android releases from CAF using the Linux kernel may have a NULL pointer dereference issue upon timer expiry.
Original NVD description (English source)
In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists where an array out of bounds access can occur during a CA call.