CVE-2015-9032

LowCVSS 3.3/10Last modified Jun 17, 2026

Description

In all Android releases from CAF using the Linux kernel, a DRM key was exposed to QTEE applications.

Metrics

CVSS 3.0 3.3/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-200

Affected software

VendorProductVersions
Qualcomm, Inc.All Qualcomm productsAll Android releases from CAF using the Linux kernel

References

Timeline

Published
Jun 13, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2015

CVE-2015-90337.8In all Android releases from CAF using the Linux kernel, a QTEE system call fails to validate a pointer.CVE-2015-90349.8In all Qualcomm products with Android releases from CAF using the Linux kernel, a string can fail to be null-terminated in SIP leading to a CVE-2015-90359.8In all Qualcomm products with Android releases from CAF using the Linux kernel, a memory buffer fails to be freed after it is no longer needCVE-2015-90369.8In all Qualcomm products with Android releases from CAF using the Linux kernel, an incorrect length is used to clear a memory buffer resultiCVE-2015-90379.8In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read may occur in the processing of a downlinkCVE-2015-90389.8In all Qualcomm products with Android releases from CAF using the Linux kernel, a NULL pointer may be dereferenced in the front end.CVE-2015-90399.8In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in eMBMS where an assertion can be reCVE-2015-90409.8In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in a GERAN API.CVE-2015-90419.8In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists when performing WCDMACVE-2015-90429.8In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists when processing a QMICVE-2015-90439.8In all Qualcomm products with Android releases from CAF using the Linux kernel, a NULL pointer can be dereferenced upon the expiry of a timeCVE-2015-90449.8In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in LTE where an assertion can be reac
CVE-2015-9032: Low severity, CVSS 3.3 | Vulnix