← Vulnerability feed

Vulnerability record · CVE-2015-9196 · published 18 April 2018

CVE-2015-9196: Qualcomm fsm9055 firmware improper input validation vulnerability

Qualcomm · Fsm9055 Firmware

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Small Cell SoC FSM9055, MDM9635M, SD 400, and SD 800, improper input validation in tzbsp_ocmem can cause privilege escalation.

9.8 CVSS 3.0 Critical EPSS 1.5% · top 27.2% CWE-20 · Improper input validationCWE-264 · Permissions and access controls
9.8CVSS 3.0 base score, v2 10.0
1.5%EPSS exploitation probability, 30 days
NoNot in CISA KEV
4Affected product versions listed by NVD
4References
17 Jun 2026Last modified by NVD

Description

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Small Cell SoC FSM9055, MDM9635M, SD 400, and SD 800, improper input validation in tzbsp_ocmem can cause privilege escalation.

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

4 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.securityfocus.com/bid/103671 Third Party AdvisoryVDB Entry
https://source.android.com/security/bulletin/2018-04-01 Vendor Advisory
http://www.securityfocus.com/bid/103671 Third Party AdvisoryVDB Entry
https://source.android.com/security/bulletin/2018-04-01 Vendor Advisory

Track CVE-2015-9196 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2021-1920Qualcomm apq8009 firmware vulnerabilityInteger underflow can occur due to improper handling of incoming RTCP packets in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdr…EPSS 0.80%9.8CVE-2021-1916Qualcomm apq8009 firmware out-of-bounds write vulnerabilityPossible buffer underflow due to lack of check for negative indices values when processing user provided input in Snapdragon Auto, Snapdragon Compute…EPSS 0.80%9.8CVE-2021-1919Qualcomm apq8009 firmware vulnerabilityInteger underflow can occur when the RTCP length is lesser than than the actual blocks present in Snapdragon Auto, Snapdragon Compute, Snapdragon Con…EPSS 0.80%9.8CVE-2020-11279Qualcomm apq8009 firmware integer overflow vulnerabilityMemory corruption while processing crafted SDES packets due to improper length check in sdes packets recieved in Snapdragon Auto, Snapdragon Compute,…EPSS 0.82%9.8CVE-2020-11170Qualcomm apq8009 firmware classic buffer overflow vulnerabilityOut of bound memory access while playing music playbacks with crafted vorbis content due to improper checks in header extraction in Snapdragon Auto, …EPSS 0.83%9.8CVE-2019-14052Qualcomm apq8009 firmware use of uninitialized resource vulnerabilityu'Accessing an uninitialized data structure could result in partially copying of contents and thus incorrect processing' in Snapdragon Auto, Snapdrag…EPSS 0.91%9.8CVE-2019-14073Qualcomm apq8009 firmware out-of-bounds write vulnerabilityCopying RTCP messages into the output buffer without checking the destination buffer size which could lead to a remote stack overflow when processing…EPSS 0.71%9.8CVE-2019-14062Qualcomm apq8009 firmware classic buffer overflow vulnerabilityBuffer overflows while decoding setup message from Network due to lack of check of IE message length received from network in Snapdragon Auto, Snapdr…EPSS 0.90%

Source: NIST National Vulnerability Database (record CVE-2015-9196), CISA KEV, FIRST EPSS (scores of 2026-10-12). This page is refreshed as NVD updates the record.