CVE-2015-9047

Summary

In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in GNSS when performing a scan after bootup.

Affected Software

VendorProductVersion RangeStatus
Qualcomm, Inc.All Qualcomm productsAll Android releases from CAF using the Linux kernelaffected

Weaknesses

  • Buffer Copy without Checking Size of Input in GNSS

ADP Enrichment

CVE Program Container

Additional References

References