CVE-2015-9007

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In TrustZone in all Android releases from CAF using the Linux kernel, a Double Free vulnerability could potentially exist.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-415

Affected software

VendorProductVersions
Qualcomm, Inc.All Qualcomm productsAll Android releases from CAF using the Linux kernel

References

Timeline

Published
Jun 6, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2015

CVE-2015-90089.8An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-3638CVE-2015-90099.8An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-3639CVE-2015-90109.8An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-3639CVE-2015-90119.8An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-3671CVE-2015-90129.8An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-3638CVE-2015-90139.8An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-3639CVE-2015-90149.8An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-3639CVE-2015-90157.8An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-3671CVE-2015-90167.0In blk_mq_tag_to_rq in blk-mq.c in the upstream kernel, there is a possible use after free due to a race condition when a request has been pCVE-2015-90195.3In libxslt 1.1.29 and earlier, the EXSLT math.random function was not initialized with a random seed during startup, which could cause usageCVE-2015-90207.8In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in the unlocking of memory.CVE-2015-90215.5In all Android releases from CAF using the Linux kernel, access control to SMEM memory was not enabled.
CVE-2015-9007: High severity, CVSS 7.8 | Vulnix