In all Android releases from CAF using the Linux kernel, time-of-check Time-of-use (TOCTOU) Race Conditions exist in several TZ APIs.
References
Link | Resource |
---|---|
https://source.android.com/security/bulletin/2017-06-01 | Vendor Advisory |
http://www.securityfocus.com/bid/98874 | Third Party Advisory VDB Entry |
http://www.securitytracker.com/id/1038623 |
Configurations
Information
Published : 2017-06-13 13:29
Updated : 2017-07-07 18:29
NVD link : CVE-2015-9022
Mitre link : CVE-2015-9022
JSON object : View
CWE
CWE-362
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Products Affected
- android