What’s Vulnerable › Vulnerabilities

CVE-2015-9199

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-04-18 · updated 2026-06-17
• Weakness: CWE-119

Description

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile IPQ4019, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, SD 800, SD 808, SD 810, SD 820, and SD 820A, A non-secure region check is done while registering QSEE buffer address which is passed by HLOS but not while logging in the QSEE buffer, so corruption of dynamically protected secure region can occur if the non-secure buffer is changed between the time it's checked and when it's used.

Affected products

• Qualcomm Ipq4019 Firmware: all versions
• Qualcomm Mdm9625 Firmware: all versions
• Qualcomm Mdm9635M Firmware: all versions
• Qualcomm Mdm9640 Firmware: all versions
• Qualcomm Mdm9650 Firmware: all versions
• Qualcomm Mdm9655 Firmware: all versions
• Qualcomm Sd 205 Firmware: all versions
• Qualcomm Sd 210 Firmware: all versions
• Qualcomm Sd 212 Firmware: all versions
• Qualcomm Sd 400 Firmware: all versions
• Qualcomm Sd 410 Firmware: all versions
• Qualcomm Sd 412 Firmware: all versions
• Qualcomm Sd 415 Firmware: all versions
• Qualcomm Sd 615 Firmware: all versions
• Qualcomm Sd 616 Firmware: all versions
• Qualcomm Sd 800 Firmware: all versions
• Qualcomm Sd 808 Firmware: all versions
• Qualcomm Sd 810 Firmware: all versions
• Qualcomm Sd 820 Firmware: all versions
• Qualcomm Sd 820A Firmware: all versions

References

• http://www.securityfocus.com/bid/103671
• https://source.android.com/security/bulletin/2018-04-01
• http://www.securityfocus.com/bid/103671
• https://source.android.com/security/bulletin/2018-04-01

Get alerted when CVE-2015-9199 or the next vulnerability affects your stack