CVE:CVE-2015-9212
CNNVD:CNNVD-201804-941
Android是美国谷歌（Google）公司和开放手持设备联盟（简称OHA）共同开发的一套以Linux为基础的开源操作系统。Qualcomm MSM8909W等都是美国高通（Qualcomm）公司的中央处理器（CPU）产品。
Android 2018-04-05之前版本中的Qualcomm闭源组件存在输入验证漏洞，该漏洞源于程序在处理TZ_PR_CMD_SAVE_KEY命令时，没有执行输入验证。攻击者可利用该漏洞造成缓冲区越界读取。以下产品（用于汽车、移动设备和手表）受到影响：Qualcomm MSM8909W；SD 210；SD 212；SD 205；SD 400；SD 410/12；SD 800。
solution:Upgrade qualcomm msm8909w_firmware to a higher version than -; Upgrade qualcomm sd_210_firmware to a higher version than -; Upgrade qualcomm sd_212_firmware to a higher version than -; Upgrade qualcomm sd_205_firmware to a higher version than -; Upgrade qualcomm sd_400_firmware to a higher version than -; Upgrade qualcomm sd_410_firmware to a higher version than -; Upgrade qualcomm sd_412_firmware to a higher version than -; Upgrade qualcomm sd_800_firmware to a higher version than -