CVSS 3.0
9.8 criticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2015-9220
Critical (9.8) in qualcomm. EPSS 1.2% chance of exploitation in the next 30 days.
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, IPQ8064, MDM9206, MDM9607, MDM9640, MDM9650, QCA4531, QCA6174A, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9378, QCA9379, QCA9558, QCA9880, QCA9886, QCA9980, SD 210/SD 212/SD 205, SD 425, SD 625, SD 810, SD 820, and SDX20, integer overflow occurs when the size of the firmware section is incorrectly encoded in the firmware image.
Severity
- EPSS
- 1.2% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-31)
- CWE
- CWE-190
- Published
- Modified
- Record from
- the NVD, synced
Affected
- qualcomm:ipq4019_firmware
- qualcomm:ipq8064_firmware
- qualcomm:mdm9206_firmware
- qualcomm:mdm9607_firmware
- qualcomm:mdm9640_firmware
- qualcomm:mdm9650_firmware
- qualcomm:qca4531_firmware
- qualcomm:qca6174a_firmware
- qualcomm:qca6574au_firmware
- qualcomm:qca6584_firmware
- qualcomm:qca6584au_firmware
- qualcomm:qca9377_firmware
- qualcomm:qca9378_firmware
- qualcomm:qca9379_firmware
- qualcomm:qca9558_firmware
- qualcomm:qca9880_firmware
- qualcomm:qca9886_firmware
- qualcomm:qca9980_firmware
- qualcomm:sd_205_firmware
- qualcomm:sd_210_firmware
- qualcomm:sd_212_firmware
- qualcomm:sd_425_firmware
- qualcomm:sd_625_firmware
- qualcomm:sd_810_firmware
- qualcomm:sd_820_firmware
- qualcomm:sdx20_firmware