Main Vulnerability Database Vulnerabilities #VU38916

Integer overflow in Google Android - CVE-2015-9005

Published: June 6, 2017 / Updated: August 8, 2020

Vulnerability identifier: #VU38916

CSH Severity: High

CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2015-9005

CWE-ID: CWE-190

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.

In TrustZone in all Android releases from CAF using the Linux kernel, an Integer Overflow to Buffer Overflow vulnerability could potentially exist.

Google Android

Install update from vendor's website.