CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. It affects Android.
CVE
CVE-2015-9220
Severity
CRITICAL
CVSS
9.8
EPSS
1.31%
Android
Original NVD Description
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, IPQ8064, MDM9206, MDM9607, MDM9640, MDM9650, QCA4531, QCA6174A, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9378, QCA9379, QCA9558, QCA9880, QCA9886, QCA9980, SD 210/SD 212/SD 205, SD 425, SD 625, SD 810, SD 820, and SDX20, integer overflow occurs when the size of the firmware section is incorrectly encoded in the firmware image.
Related CVEs
Other vulnerabilities affecting the same vendor(s)