CVE-2014-9998
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear IPQ4019, IPQ8064, MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, QCA4531, QCA6174A, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9378, QCA9379, QCA9558, QCA9880, QCA9886, QCA9980, SD 210/SD 212/SD 205, SD 425, SD 625, SD 808, SD 810, SD 820, and SDX20, while processing firmware image signature, the internal buffer may overflow if the firmware signature size is large.
- Score
- CVSS 3.0 9.8 Critical
- Status
- Modified - product-security@qualcomm.com
- Published
- 2018-04-18
- Last modified
- 2024-09-17
- Weaknesses
- CWE-119
Affected products
- Ipq4019 Firmware (Qualcomm)
- Ipq8064 Firmware (Qualcomm)
- Mdm9206 Firmware (Qualcomm)
- Mdm9607 Firmware (Qualcomm)
- Mdm9635m Firmware (Qualcomm)
- Mdm9640 Firmware (Qualcomm)
- Mdm9645 Firmware (Qualcomm)
- Mdm9650 Firmware (Qualcomm)
- Qca4531 Firmware (Qualcomm)
- Qca6174a Firmware (Qualcomm)
- Qca6574au Firmware (Qualcomm)
- Qca6584 Firmware (Qualcomm)
- Qca6584au Firmware (Qualcomm)
- Qca9377 Firmware (Qualcomm)
- Qca9378 Firmware (Qualcomm)
- Qca9379 Firmware (Qualcomm)
- Qca9558 Firmware (Qualcomm)
- Qca9880 Firmware (Qualcomm)
- Qca9886 Firmware (Qualcomm)
- Qca9980 Firmware (Qualcomm)
- Sd 205 Firmware (Qualcomm)
- Sd 210 Firmware (Qualcomm)
- Sd 212 Firmware (Qualcomm)
- Sd 425 Firmware (Qualcomm)
- Sd 625 Firmware (Qualcomm)
- Sd 808 Firmware (Qualcomm)
- Sd 810 Firmware (Qualcomm)
- Sd 820 Firmware (Qualcomm)
- Sdx20 Firmware (Qualcomm)
- Snapdragon Automobile (Qualcomm Inc.)
- Snapdragon Mobile (Qualcomm Inc.)
- Snapdragon Wear (Qualcomm Inc.)
References
- http://www.securityfocus.com/bid/103671
- https://source.android.com/security/bulletin/2018-04-01
