Unauthorized Memory Access in Qualcomm Snapdragon Products
CVE-2015-9140

7.5HIGH

Key Information:

Vendor

Qualcomm
Status
Snapdragon Mobile, Snapdragon Wear, Small Cell Soc
Vendor
CVE Published:
18 April 2018

What is CVE-2015-9140?

This vulnerability allows unauthorized memory access through the online memory dump feature in several Qualcomm Snapdragon products. Systems operating on Android versions prior to April 2018 are susceptible to this exploit, which can potentially expose sensitive information and compromise device integrity. Immediate attention and updates are recommended to mitigate this risk.

Affected Version(s)

Snapdragon Mobile, Snapdragon Wear, Small Cell SoC FSM9055, MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 600, SD 615/16/SD 415, SD 617, SD 650/52, SD 800, SD 808, SD 810, SDX20

References

https://source.android.com/security/bulletin/2018-04-01
x_refsource_CONFIRM
http://www.securityfocus.com/bid/103671
vdb-entryx_refsource_BID

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.