TI-2015-06064 Aliases CVE-2015-7292 GHSA-f9qj-f7m4-fq46

Memory corruption in Amazon Fire OS before 2016-01-15

MEDIUM 46CWE-119Published 2017-04-10 · Updated 2024-08-06

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Code execution
Confidentiality · integrity · availability: High · High · High
Fix status: No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-119 and the CVSS impact.

Summary

Stack-based buffer overflow in the havok_write function in drivers/staging/havok/havok.c in Amazon Fire OS before 2016-01-15 allows attackers to cause a denial of service (panic) or possibly have unspecified other impact via a long string to /dev/hv.

Why it matters now

EPSS 0.01851 79th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	Amazon Fire OS before 2016-01-15	Amazon Fire OS before 2016-01-15	—	No fix listed	CNA

Amazon Fire OS before 2016-01-15 Vendor— Affected Amazon Fire OS before 2016-01-15 Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:o:amazon:fire_os::::::::	up to 5.0	Vulnerable	AWS

cpe:2.3:o:amazon:fire_os:*:*:*:*:*:*:*:* Versions up to 5.0 Vulnerable ·AWS

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2015-7292
2026-10-03 Alias added: GHSA-f9qj-f7m4-fq46

References

Advisory 1

https://marcograss.github.io/security/android/cve/2016/01/15/cve-2015-7292-amazon-kernel-stack-buffer-overflow.html

TI-2023-01309 Improper JPAKE implementation allows offline PIN brute-forcing due to the initialization… CVSS 3.1HIGH 8.8
TI-2018-07818 kernel/omap/drivers/mfd/twl6030-gpadc.c in the kernel component in Amazon Kindle Fire… CVSS 3.0HIGH 7.5
TI-2018-07817 kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Kindle Fire… CVSS 3.0HIGH 7.5
TI-2018-07816 kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Kindle Fire… CVSS 3.0HIGH 7.5
TI-2018-07815 kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Kindle Fire… CVSS 3.0HIGH 7.5
TI-2018-07814 kernel/omap/drivers/video/omap2/dsscomp/device.c in the kernel component in Amazon Kindle… CVSS 3.0HIGH 7.5

See all 12 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences