CVE-2015-8937

CVE-2015-8937 is a privilege escalation vulnerability affecting Qualcomm components in Android on Nexus 5, 6, and 7 (2013) devices. It stems from improper handling of a socket process within the drivers/char/diag/diagchar_core.c file. An attacker could exploit this by tricking a user into installing a crafted application, leading to high impact on confidentiality, integrity, and availability. The CVSSv3 score is 7.8 (High), indicating a local attack vector with low complexity, but requiring user interaction. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.