In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9625, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, and SD 820A, lack of address argument validation inqsee_fuse_write could lead to untrusted pointer dereference.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-9109
Reference (s):
- BID:103671
- URL: http://www.securityfocus.com/bid/103671
- https://source.android.com/security/bulletin/2018-04-01