CVE-2015-9133

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level

Description The issue occurs when the TZ WV CMD DECRYPT VIDEO function in the Widevine App is called with a size that is too large, potentially leading to an integer overflow. This affects Android devices with Qualcomm Snapdragon Mobile SD 400, SD 410/12, SD 617, SD 650/52, SD 800, and SD 810.

Recommendations For Android versions prior to 2018-04-05 security patch level, update to a version with a security patch level of 2018-04-05 or later to resolve the issue.