CVE-2015-9180

CVE-2015-9180 affects Android on a wide range of Qualcomm Snapdragon platforms (Automotive, Mobile, Wear; various SD series). The issue is that a user-space “response pointer” passed to SDMX_process is not checked before use; if the response buffer is smaller than 16 bytes, writes can overflow in...