CVE:CVE-2015-9146
CNNVD:CNNVD-201804-1004
Android是美国谷歌（Google）公司和开放手持设备联盟（简称OHA）共同开发的一套以Linux为基础的开源操作系统。Qualcomm MDM9625等都是美国高通（Qualcomm）公司应用于不同平台的中央处理器（CPU）产品。
Android 2018-04-05之前版本中的Qualcomm闭源组件存在输入验证漏洞，该漏洞源于程序在访问传入的指针之前没有对其进行正确的验证。远程攻击者可利用该漏洞获取访问权限。以下产品（用于移动设备）受到影响：Qualcomm MDM9625；MDM9635M；MDM9645；MDM9650；MDM9655；SD 400；SD 800；SD 835；SD 845；SD 850；SDX20。
solution:Upgrade qualcomm mdm9625_firmware to a higher version than -; Upgrade qualcomm mdm9635m_firmware to a higher version than -; Upgrade qualcomm mdm9650_firmware to a higher version than -; Upgrade qualcomm mdm9655_firmware to a higher version than -; Upgrade qualcomm sd_400_firmware to a higher version than -; Upgrade qualcomm sd_800_firmware to a higher version than -; Upgrade qualcomm sd_835_firmware to a higher version than -; Upgrade qualcomm sd_845_firmware to a higher version than -; Upgrade qualcomm sdx20_firmware to a higher version than -; Upgrade qualcomm sd_850_firmware to a higher version than -