CVE-2015-9052

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in LTE where an assertion can be reached while processing a downlink message.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

VendorProductVersions
Qualcomm, Inc.All Qualcomm productsAll Android releases from CAF using the Linux kernel

References

Timeline

Published
Aug 18, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2015

CVE-2015-90539.8In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in the processing of CVE-2015-90549.8In all Qualcomm products with Android releases from CAF using the Linux kernel, a NULL pointer can be dereferenced during GAL decoding.CVE-2015-90559.8In all Qualcomm products with Android releases from CAF using the Linux kernel, an assertion was potentially reachable in a memory managemenCVE-2015-90566.1Kibana versions prior to 4.1.3 and 4.2.1 are vulnerable to a XSS attack.CVE-2015-90576.1Multiple cross-site scripting (XSS) vulnerabilities in Proxmox Mail Gateway prior to hotfix 4.0-8-097d26a9 allow remote attackers to inject CVE-2015-90586.1Open redirect vulnerability in Proxmox Mail Gateway prior to hotfix 4.0-8-097d26a9 allows remote attackers to redirect users to arbitrary weCVE-2015-90599.8picocom before 2.0 has a command injection vulnerability in the 'send and receive file' command because the command line is executed by /binCVE-2015-90609.8In all Qualcomm products with Android releases from CAF using the Linux kernel, a pointer is not properly validated in a QTEE system call.CVE-2015-90619.8In all Qualcomm products with Android releases from CAF using the Linux kernel, playReady DRM failed to check a length potentially leading tCVE-2015-90629.8In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow to buffer overflow vulnerability exists CVE-2015-90639.8In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a procedure involvCVE-2015-90649.8In all Qualcomm products with Android releases from CAF using the Linux kernel, the UE can send IMEI or IMEISV to the network on a network r
CVE-2015-9052: Critical severity, CVSS 9.8 | Vulnix