CVE-2015-9002

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In TrustZone an out-of-range pointer offset vulnerability can potentially occur in a DRM routine in all Android releases from CAF using the Linux kernel.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-189

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	All Qualcomm Products	All Android releases from CAF using the Linux kernel

References

http://www.securityfocus.com/bid/97329Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1038201
https://source.android.com/security/bulletin/2017-04-01Patch, Vendor Advisory
http://www.securityfocus.com/bid/97329Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1038201
https://source.android.com/security/bulletin/2017-04-01Patch, Vendor Advisory

Timeline

Published: May 16, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-90037.8In TrustZone a cryptographic issue can potentially occur in all Android releases from CAF using the Linux kernel.CVE-2015-90047.8kernel/events/core.c in the Linux kernel before 3.19 mishandles counter grouping, which allows local users to gain privileges via a crafted CVE-2015-90057.8In TrustZone in all Android releases from CAF using the Linux kernel, an Integer Overflow to Buffer Overflow vulnerability could potentially CVE-2015-90067.8In Resource Power Manager (RPM) in all Android releases from CAF using the Linux kernel, an Improper Access Control vulnerability could pote CVE-2015-90077.8In TrustZone in all Android releases from CAF using the Linux kernel, a Double Free vulnerability could potentially exist.CVE-2015-90089.8An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-3638 CVE-2015-90099.8An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-3639 CVE-2015-90109.8An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-3639 CVE-2015-90119.8An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-3671 CVE-2015-90129.8An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-3638 CVE-2015-90139.8An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-3639 CVE-2015-90149.8An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-3639