CVE-2015-9064

Critical

Published: 18/08/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

All Qualcomm products with Android releases from CAF using the Linux kernel can send IMEI or IMEISV to the network on a network request before NAS security has been activated.

Risk Assessment

This may lead to the exposure of sensitive device information, increasing the risk of unauthorized access to the network.

Recommendation

It is recommended to update the software to the latest version to ensure NAS security is activated before sending data to the network.

Original NVD description (English source)

In all Qualcomm products with Android releases from CAF using the Linux kernel, the UE can send IMEI or IMEISV to the network on a network request before NAS security has been activated.