CVE:CVE-2015-9195
CNNVD:CNNVD-201804-958
Android是美国谷歌（Google）公司和开放手持设备联盟（简称OHA）共同开发的一套以Linux为基础的开源操作系统。QTEE syscall handler是其中的一个QTEE系统调用处理程序。Qualcomm MDM9206等都是美国高通（Qualcomm）公司应用于不同平台的中央处理器（CPU）产品。
Android 2018-04-05之前版本中的Qualcomm闭源组件的QTEE syscall handler存在缓冲区溢出漏洞。远程攻击攻击者可利用该漏洞在系统上执行任意代码。以下产品（用于移动设备）受到影响：Qualcomm MDM9625；MDM9635M；MDM9650；MDM9655；SD 400；SD 410/12；SD 615/16；SD 415；SD 617；SD 650/52；SD 808；SD 810；SDX20。
solution:Upgrade qualcomm mdm9625_firmware to a higher version than -; Upgrade qualcomm mdm9635m_firmware to a higher version than -; Upgrade qualcomm mdm9650_firmware to a higher version than -; Upgrade qualcomm mdm9655_firmware to a higher version than -; Upgrade qualcomm sd_400_firmware to a higher version than -; Upgrade qualcomm sd_410_firmware to a higher version than -; Upgrade qualcomm sd_412_firmware to a higher version than -; Upgrade qualcomm sd_615_firmware to a higher version than -; Upgrade qualcomm sd_616_firmware to a higher version than -; Upgrade qualcomm sd_415_firmware to a higher version than -; Upgrade qualcomm sd_617_firmware to a higher version than -; Upgrade qualcomm sd_650_firmware to a higher version than -; Upgrade qualcomm sd_652_firmware to a higher version than -; Upgrade qualcomm sd_808_firmware to a higher version than -; Upgrade qualcomm sd_810_firmware to a higher version than -; Upgrade qualcomm sdx20_firmware to a higher version than -