CVE-2015-9061

Critical

Published: 18/08/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

All Qualcomm products with Android releases from CAF using the Linux kernel have an issue with PlayReady DRM that fails to check a length, potentially leading to unauthorized access to secure memory.

Risk Assessment

Organizations may be exposed to unauthorized access to sensitive data stored in secure memory, which could lead to serious security breaches.

Recommendation

It is recommended to update Qualcomm products to the latest versions that address this vulnerability and to monitor access to secure memory.

Original NVD description (English source)

In all Qualcomm products with Android releases from CAF using the Linux kernel, playReady DRM failed to check a length potentially leading to unauthorized access to secure memory.