CVE-2015-8997: In TrustZone a time-of-check time-of-use race condition could potentially exist in a listener routine in al...

Security readout for executives and security teams

CVE-2015-8997 is a Qualcomm Android TrustZone issue involving a possible race condition. In business terms, it affects low-level device security code, not a normal app or web service. The public record gives limited detail and no CVSS score, so urgency depends on whether managed Android devices run old Qualcomm CAF-based firmware. Likely exposure is legacy Android devices using Qualcomm CAF-derived Linux kernel releases, especially devices missing Android security updates from April 2017 or later. Sources do not identify specific handset models, chipsets, or vulnerable build numbers. Prioritize as a legacy mobile firmware exposure. It is not currently source-supported as actively exploited, but unmanaged or unsupported Qualcomm Android devices may carry unresolved low-level risk. Mitigation focus: Identify Qualcomm Android devices and their Android security patch levels.; Apply OEM firmware updates that incorporate the April 2017 Android security bulletin fixes.; Check Qualcomm, Android, and device-vendor advisories for product-specific remediation..

Prepared

Jun 13, 2026, 05:01 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.