CVE-2015-8995

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In TrustZone an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-190

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	All Qualcomm Products	All Android releases from CAF using the Linux kernel

References

http://www.securityfocus.com/bid/97329Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1038201
https://source.android.com/security/bulletin/2017-04-01Patch, Vendor Advisory
http://www.securityfocus.com/bid/97329Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1038201
https://source.android.com/security/bulletin/2017-04-01Patch, Vendor Advisory

Timeline

Published: May 16, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-89967.0In TrustZone a time-of-check time-of-use race condition could potentially exist in a QFPROM routine in all Android releases from CAF using t CVE-2015-89977.0In TrustZone a time-of-check time-of-use race condition could potentially exist in a listener routine in all Android releases from CAF using CVE-2015-89987.8In TrustZone an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel.CVE-2015-89997.8In TrustZone a buffer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel while loading an CVE-2015-90007.8In TrustZone an untrusted pointer dereference vulnerability can potentially occur in a DRM routine in all Android releases from CAF using th CVE-2015-90015.5In TrustZone an information exposure vulnerability can potentially occur in all Android releases from CAF using the Linux kernel.CVE-2015-90027.8In TrustZone an out-of-range pointer offset vulnerability can potentially occur in a DRM routine in all Android releases from CAF using the CVE-2015-90037.8In TrustZone a cryptographic issue can potentially occur in all Android releases from CAF using the Linux kernel.CVE-2015-90047.8kernel/events/core.c in the Linux kernel before 3.19 mishandles counter grouping, which allows local users to gain privileges via a crafted CVE-2015-90057.8In TrustZone in all Android releases from CAF using the Linux kernel, an Integer Overflow to Buffer Overflow vulnerability could potentially CVE-2015-90067.8In Resource Power Manager (RPM) in all Android releases from CAF using the Linux kernel, an Improper Access Control vulnerability could pote CVE-2015-90077.8In TrustZone in all Android releases from CAF using the Linux kernel, a Double Free vulnerability could potentially exist.