CVE-2015-9020

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in the unlocking of memory.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-476

Affected software

No affected versions have been published.

Timeline

Published
Jun 13, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2015

CVE-2015-90215.5In all Android releases from CAF using the Linux kernel, access control to SMEM memory was not enabled.CVE-2015-90227.0In all Android releases from CAF using the Linux kernel, time-of-check Time-of-use (TOCTOU) Race Conditions exist in several TZ APIs.CVE-2015-90237.8In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in the PlayReady API.CVE-2015-90245.5In all Android releases from CAF using the Linux kernel, some interfaces were improperly exposed to QTEE applications.CVE-2015-90257.8In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a QTEE application.CVE-2015-90267.8In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in WideVine DRM.CVE-2015-90277.8In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in WideVine DRM.CVE-2015-90287.8In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a cryptographic routine.CVE-2015-90297.8In all Android releases from CAF using the Linux kernel, a vulnerability exists in the access control settings of modem memory.CVE-2015-90307.8In all Android releases from CAF using the Linux kernel, the Hypervisor API could be misused to bypass authentication.CVE-2015-90313.3In all Android releases from CAF using the Linux kernel, a TZ memory address is exposed to HLOS by HDCP.CVE-2015-90323.3In all Android releases from CAF using the Linux kernel, a DRM key was exposed to QTEE applications.
CVE-2015-9020: High severity, CVSS 7.8 | Vulnix