CVE-2015-9115: Qualcomm MDM9625 Firmware

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9625, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 820, and SD 820A, no address argument validation is performed on calls to the qsee_prng_getdata syscall.

Affected products

• Qualcomm MDM9625 Firmware: affected versions not specified
• Qualcomm Sd 410 Firmware: affected versions not specified
• Qualcomm Sd 412 Firmware: affected versions not specified
• Qualcomm Sd 415 Firmware: affected versions not specified
• Qualcomm Sd 425 Firmware: affected versions not specified
• Qualcomm Sd 430 Firmware: affected versions not specified
• Qualcomm Sd 450 Firmware: affected versions not specified
• Qualcomm Sd 615 Firmware: affected versions not specified
• Qualcomm Sd 616 Firmware: affected versions not specified
• Qualcomm Sd 617 Firmware: affected versions not specified
• Qualcomm Sd 625 Firmware: affected versions not specified
• Qualcomm Sd 650 Firmware: affected versions not specified
• Qualcomm Sd 652 Firmware: affected versions not specified
• Qualcomm Sd 820 Firmware: affected versions not specified
• Qualcomm Sd 820a Firmware: affected versions not specified

Published 2018-04-18. Last modified 2026-06-17.