CVE-2015-9048

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in the processing of lost RTP packets.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

VendorProductVersions
Qualcomm, Inc.All Qualcomm productsAll Android releases from CAF using the Linux kernel

References

Timeline

Published
Aug 18, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2015

CVE-2015-90499.8In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in the processing of certain responseCVE-2015-90509.8In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists where an array out of bounds access cCVE-2015-90519.8In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in LTE where an assertion can be reacCVE-2015-90529.8In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in LTE where an assertion can be reacCVE-2015-90539.8In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in the processing of CVE-2015-90549.8In all Qualcomm products with Android releases from CAF using the Linux kernel, a NULL pointer can be dereferenced during GAL decoding.CVE-2015-90559.8In all Qualcomm products with Android releases from CAF using the Linux kernel, an assertion was potentially reachable in a memory managemenCVE-2015-90566.1Kibana versions prior to 4.1.3 and 4.2.1 are vulnerable to a XSS attack.CVE-2015-90576.1Multiple cross-site scripting (XSS) vulnerabilities in Proxmox Mail Gateway prior to hotfix 4.0-8-097d26a9 allow remote attackers to inject CVE-2015-90586.1Open redirect vulnerability in Proxmox Mail Gateway prior to hotfix 4.0-8-097d26a9 allows remote attackers to redirect users to arbitrary weCVE-2015-90599.8picocom before 2.0 has a command injection vulnerability in the 'send and receive file' command because the command line is executed by /binCVE-2015-90609.8In all Qualcomm products with Android releases from CAF using the Linux kernel, a pointer is not properly validated in a QTEE system call.
CVE-2015-9048: Critical severity, CVSS 9.8 | Vulnix