What is CVE-2015-9221?

CVE-2015-9221 is a critical-severity vulnerability in Qualcomm Sd 400, classified under NULL Pointer Dereference. CVSS score: 9.8/10. Published 2018-04-18.

How severe is CVE-2015-9221?

Critical severity. CVSS v3 base score is 9.8 out of 10.

NULL pointer dereference in Qualcomm Sd 400

CVE-2015-9221

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 400, SD 800, and SD 810, lack of validation of pointers passed by secure apps could lead to an untrusted pointer dereference.

EPSS: 0.013 (68.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Qualcomm Sd_400
Qualcomm Sd_400_firmware
Qualcomm Sd_800
Qualcomm Sd_800_firmware
Qualcomm Sd_810
Qualcomm Sd_810_firmware
Qualcomm, Inc. Snapdragon Mobile — versions SD 400, SD 800, SD 810

Weakness classification (CWE)

CWE-476 — NULL Pointer Dereference

References

product-security@qualcomm.com (x_refsource_CONFIRM, Vendor Advisory)
product-security@qualcomm.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)

Frequently asked questions

What is CVE-2015-9221?: CVE-2015-9221 is a critical-severity vulnerability in Qualcomm Sd 400, classified under NULL Pointer Dereference. CVSS score: 9.8/10. Published 2018-04-18.
How severe is CVE-2015-9221?: Critical severity. CVSS v3 base score is 9.8 out of 10.