Unauthorized Memory Access in Qualcomm Snapdragon Products
CVE-2015-9140
7.5HIGH
Summary
This vulnerability allows unauthorized memory access through the online memory dump feature in several Qualcomm Snapdragon products. Systems operating on Android versions prior to April 2018 are susceptible to this exploit, which can potentially expose sensitive information and compromise device integrity. Immediate attention and updates are recommended to mitigate this risk.
Affected Version(s)
Snapdragon Mobile, Snapdragon Wear, Small Cell SoC FSM9055, MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 600, SD 615/16/SD 415, SD 617, SD 650/52, SD 800, SD 808, SD 810, SDX20
References
CVSS V3.1
Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved