CVE-2015-9047
CriticalSummary
All Qualcomm products with Android releases from CAF using the Linux kernel have a vulnerability in GNSS when performing a scan after bootup.
Risk Assessment
This vulnerability may lead to unauthorized access to user location information, posing a privacy risk.
Recommendation
It is recommended to update the software to the latest version to mitigate this vulnerability.
Other vulnerabilities in GNSS
See all- CVE-2026-20551Medium
In gnss, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation.
- CVE-2026-20550Medium
In gnss, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation.
Original NVD description (English source)
In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in GNSS when performing a scan after bootup.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS