CVE-2015-9176

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level

Description The issue affects Qualcomm Snapdragon processors in Android devices. It involves the OEMCrypto Generic Sign() function, where the Input address is registered as a shared buffer but not properly checked before use. This allows access to addresses residing in secure/CP memory.

Recommendations For Android versions prior to 2018-04-05 security patch level, update to a version with a security patch level of 2018-04-05 or later to resolve the issue.