Sign in
CVE-2015-9189
CVE-2015-9189
Description
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 600, SD 615/16/SD 415, SD 808, and SD 810, processing of TZ application command in tz_app_cmd_handler function could lead to potential content disclosure of secure memory.
Impact
CVSS v3 : 7.5 HIGH
CVSS v2 : 5 MEDIUM
Type
CWE-200
Attack Vector
CVSSv2 Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N
Quick links
CVE
,
NVD
,
CERT
,
Metasploit
,
Exploit-db
,
Fulldisc
,
Bugtraq
,
Microsoft
,
Red Hat
,
Debian
, GitHub
code
/
issues
,
Google
References
http://www.securityfocus.com/bid/103671
https://source.android.com/security/bulletin/2018-04-01
FAQ
Terms of service
Privacy policy