peter bassill · operator
$ cve CVE-2015-9222 JSON

CVE-2015-9222 EXPLOIT

7.5
HIGH · CVSS 3.0 · EPSS 4.3% (pctl 91)

Patch early

A public exploit exists.

Description

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835, SD 845, SDM630, SDM636, SDM660, and Snapdragon_High_Med_2016, processing erroneous bitstreams may result in a HW freeze. FW should detect the HW freeze based on watchdog timer, but because the watchdog timer is not enabled, an infinite loop occurs, resulting in a device freeze.

Scoring

CVSS7.5 (HIGH, v3.0)
VectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS4.27% — more likely to be exploited than 91% of all CVEs
WeaknessCWE-399
On CISA KEVno
Public exploityes
Published2018-04-18
Last modified2026-06-17

Affected (40)

VendorProduct
qualcommmsm8909w
qualcommmsm8909w firmware
qualcommsd 205
qualcommsd 205 firmware
qualcommsd 210
qualcommsd 210 firmware
qualcommsd 212
qualcommsd 212 firmware
qualcommsd 400
qualcommsd 400 firmware
qualcommsd 410
qualcommsd 410 firmware
qualcommsd 412
qualcommsd 412 firmware
qualcommsd 425
qualcommsd 425 firmware
qualcommsd 427
qualcommsd 427 firmware
qualcommsd 430
qualcommsd 430 firmware
qualcommsd 435
qualcommsd 435 firmware
qualcommsd 450
qualcommsd 450 firmware
qualcommsd 625
qualcommsd 625 firmware
qualcommsd 650
qualcommsd 650 firmware
qualcommsd 652
qualcommsd 652 firmware
qualcommsd 800
qualcommsd 800 firmware
qualcommsd 808
qualcommsd 808 firmware
qualcommsd 810
qualcommsd 810 firmware
qualcommsd 820
qualcommsd 820 firmware
qualcommsd 835
qualcommsd 835 firmware

Public exploits

SourceTitleDate
exploit-dbRomPager 4.34 (Multiple Router Vendors) - 'Misfortune Cookie' Authentication Bypass2016-04-27

References

→ the Explorer  ·  watch your stack  ·  NVD