CVE:CVE-2015-9108
CNNVD:CNNVD-201804-1039
Android是美国谷歌（Google）公司和开放手持设备联盟（简称OHA）共同开发的一套以Linux为基础的开源操作系统。Qualcomm MDM9625等都是美国高通（Qualcomm）公司应用于不同平台的中央处理器（CPU）产品。
Android 2018-04-05之前版本中的Qualcomm闭源组件存在安全漏洞，该漏洞源于在调用QSEE syscall时，程序没有对‘address’参数进行校验。攻击者可利用该漏洞执行任意的读取/写入操作或造成空指针异常。以下产品（用于移动设备和汽车）受到影响：Qualcomm MDM9625；Qualcomm SD 425；Qualcomm SD 430；Qualcomm SD 450；Qualcomm SD 625；Qualcomm SD 650/52；Qualcomm SD 820；Qualcomm SD 820A。
solution:Upgrade qualcomm mdm9625_firmware to a higher version than -; Upgrade qualcomm sd_425_firmware to a higher version than -; Upgrade qualcomm sd_430_firmware to a higher version than -; Upgrade qualcomm sd_450_firmware to a higher version than -; Upgrade qualcomm sd_625_firmware to a higher version than -; Upgrade qualcomm sd_650_firmware to a higher version than -; Upgrade qualcomm sd_652_firmware to a higher version than -; Upgrade qualcomm sd_820a_firmware to a higher version than -; Upgrade qualcomm sd_820_firmware to a higher version than -