CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-9208

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, SD 800, and SD 810, the function tzbsp_pil_verify_sig() does not strictly check that the pointer to ELF and program headers and hash segment is within secure memory. It only checks that the address is not in non-secure memory. A given address range can overlap with both secure and non-secure regions - hence if such an address is passed in, it would not pass the non-secure range check, and would be considered valid by the function, even though that memory area could be modified by the non-secure side.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 44.6%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 10.0

References

Products affected by CVE-2015-9208

Qualcomm » Ipq4019 » Version: N/A

cpe:2.3:h:qualcomm:ipq4019:-
Qualcomm » Mdm9206 » Version: N/A

cpe:2.3:h:qualcomm:mdm9206:-
Qualcomm » Mdm9607 » Version: N/A

cpe:2.3:h:qualcomm:mdm9607:-
Qualcomm » Mdm9635m » Version: N/A

cpe:2.3:h:qualcomm:mdm9635m:-
Qualcomm » Mdm9640 » Version: N/A

cpe:2.3:h:qualcomm:mdm9640:-
Qualcomm » Mdm9645 » Version: N/A

cpe:2.3:h:qualcomm:mdm9645:-
Qualcomm » Msm8909w » Version: N/A

cpe:2.3:h:qualcomm:msm8909w:-
Qualcomm » Sd 205 » Version: N/A

cpe:2.3:h:qualcomm:sd_205:-
Qualcomm » Sd 210 » Version: N/A

cpe:2.3:h:qualcomm:sd_210:-
Qualcomm » Sd 212 » Version: N/A

cpe:2.3:h:qualcomm:sd_212:-
Qualcomm » Sd 400 » Version: N/A

cpe:2.3:h:qualcomm:sd_400:-
Qualcomm » Sd 410 » Version: N/A

cpe:2.3:h:qualcomm:sd_410:-
Qualcomm » Sd 412 » Version: N/A

cpe:2.3:h:qualcomm:sd_412:-
Qualcomm » Sd 415 » Version: N/A

cpe:2.3:h:qualcomm:sd_415:-
Qualcomm » Sd 615 » Version: N/A

cpe:2.3:h:qualcomm:sd_615:-
Qualcomm » Sd 616 » Version: N/A

cpe:2.3:h:qualcomm:sd_616:-
Qualcomm » Sd 800 » Version: N/A

cpe:2.3:h:qualcomm:sd_800:-
Qualcomm » Sd 810 » Version: N/A

cpe:2.3:h:qualcomm:sd_810:-
Qualcomm » Ipq4019 Firmware » Version: N/A

cpe:2.3:o:qualcomm:ipq4019_firmware:-
Qualcomm » Mdm9206 Firmware » Version: N/A

cpe:2.3:o:qualcomm:mdm9206_firmware:-
Qualcomm » Mdm9607 Firmware » Version: N/A

cpe:2.3:o:qualcomm:mdm9607_firmware:-
Qualcomm » Mdm9635m Firmware » Version: N/A

cpe:2.3:o:qualcomm:mdm9635m_firmware:-
Qualcomm » Mdm9640 Firmware » Version: N/A

cpe:2.3:o:qualcomm:mdm9640_firmware:-
Qualcomm » Mdm9645 Firmware » Version: N/A

cpe:2.3:o:qualcomm:mdm9645_firmware:-
Qualcomm » Msm8909w Firmware » Version: N/A

cpe:2.3:o:qualcomm:msm8909w_firmware:-
Qualcomm » Sd 205 Firmware » Version: N/A

cpe:2.3:o:qualcomm:sd_205_firmware:-
Qualcomm » Sd 210 Firmware » Version: N/A

cpe:2.3:o:qualcomm:sd_210_firmware:-
Qualcomm » Sd 212 Firmware » Version: N/A

cpe:2.3:o:qualcomm:sd_212_firmware:-
Qualcomm » Sd 400 Firmware » Version: N/A

cpe:2.3:o:qualcomm:sd_400_firmware:-
Qualcomm » Sd 410 Firmware » Version: N/A

cpe:2.3:o:qualcomm:sd_410_firmware:-
Qualcomm » Sd 412 Firmware » Version: N/A

cpe:2.3:o:qualcomm:sd_412_firmware:-
Qualcomm » Sd 415 Firmware » Version: N/A

cpe:2.3:o:qualcomm:sd_415_firmware:-
Qualcomm » Sd 615 Firmware » Version: N/A

cpe:2.3:o:qualcomm:sd_615_firmware:-
Qualcomm » Sd 616 Firmware » Version: N/A

cpe:2.3:o:qualcomm:sd_616_firmware:-
Qualcomm » Sd 800 Firmware » Version: N/A

cpe:2.3:o:qualcomm:sd_800_firmware:-
Qualcomm » Sd 810 Firmware » Version: N/A

cpe:2.3:o:qualcomm:sd_810_firmware:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-9208

Products

Pricing

Contact Us