CVE-2015-7292

Critical

Published: 10/04/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

A stack-based buffer overflow in the havok_write function in havok.c in Amazon Fire OS before January 15, 2016 allows attackers to cause a denial of service (panic) or possibly have unspecified other impact via a long string to /dev/hv.

Risk Assessment

This vulnerability may lead to significant disruptions in system operation, potentially resulting in service availability loss. There is also a risk that attackers could exploit it for other unauthorized actions.

Recommendation

It is recommended to update Amazon Fire OS to a version after January 15, 2016, to mitigate this vulnerability. Additionally, systems should be monitored for unauthorized access attempts.

Original NVD description (English source)

Stack-based buffer overflow in the havok_write function in drivers/staging/havok/havok.c in Amazon Fire OS before 2016-01-15 allows attackers to cause a denial of service (panic) or possibly have unspecified other impact via a long string to /dev/hv.