CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. It affects Android.
CVE
CVE-2015-9146
Severity
CRITICAL
CVSS
9.8
EPSS
1.25%
Android
Original NVD Description
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9625, MDM9635M, MDM9645, MDM9650, MDM9655, SD 400, SD 800, SD 835, SD 845, SD 850, and SDX20, when QDI read, write, or ioctl are called, the passed-in pointer is not properly validated before accessing it for the delayed response.
Related CVEs
Other vulnerabilities affecting the same vendor(s)