CVE-2015-9062

CRITICAL

Qualcomm Android CAF - Integer Overflow to Buffer Overflow in ELF File Loading

Title source: llm

Description

In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow to buffer overflow vulnerability exists when loading an ELF file.

References (2)

Core 2

Core References

Vendor Advisory x_refsource_confirm

https://source.android.com/security/bulletin/2017-07-01

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/99467

Scores

CVSS v3 9.8

EPSS 0.0011

EPSS Percentile 29.6%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-119 CWE-190

Status published

Products (2)

google/android

Qualcomm, Inc./All Qualcomm products All Android releases from CAF using the Linux kernel

Published Aug 18, 2017

Tracked Since Feb 18, 2026