CVE-2015-9112: Qualcomm MDM9625 Firmware

Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days.

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9625, SD 400, SD 800, SD 820, and SD 820A, lack of input validation in QSEE can cause potential buffer overflow.

Affected products

• Qualcomm MDM9625 Firmware: affected versions not specified
• Qualcomm Sd 400 Firmware: affected versions not specified
• Qualcomm Sd 800 Firmware: affected versions not specified
• Qualcomm Sd 820 Firmware: affected versions not specified
• Qualcomm Sd 820a Firmware: affected versions not specified

Published 2018-04-18. Last modified 2026-06-17.