CVE-2015-9179: Improper Restriction of Operations within the Bounds of a Memory Buffer

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MSM8974, lack of length checking in OEMCryptoDeriveKeysFromSessionKey could lead to a buffer overflow vulnerability...