CVE-2015-9027 - In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in WideVine DRM

Back Back to CVE browser

HIGH

In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in WideVine DRM

Published Jun 13, 2017

7.8

HIGH

CVSS 3.0

EPSS 0.64%

Description

In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in WideVine DRM.

Affected products

Vendor Qualcomm, Inc. Product All Qualcomm products Default
n/a
- Version
  All Android releases from CAF using the Linux kernel
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Qualcomm, Inc.

All Qualcomm products

n/a

Version	Status	Constraints
All Android releases from CAF using the Linux kernel	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-476

NULL Pointer Dereference

References (3)

http://www.securityfocus.com/bid/98874
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1038623
vdb-entryx_refsource_SECTRACK
https://source.android.com/security/bulletin/2017-06-01
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
http://www.securityfocus.com/bid/98874		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1038623		vdb-entryx_refsource_SECTRACK
https://source.android.com/security/bulletin/2017-06-01		x_refsource_CONFIRMVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner qualcomm

Published Jun 13, 2017

Updated Aug 6, 2024

Reserved Apr 18, 2017

Link CVE-2015-9027

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2015-9027

Red Hat

Severity n/a

Public date n/a

Links CVE-2015-9027