CVE-2014-9998

EUVD-2014-9802
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear IPQ4019, IPQ8064, MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, QCA4531, QCA6174A, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9378, QCA9379, QCA9558, QCA9880, QCA9886, QCA9980, SD 210/SD 212/SD 205, SD 425, SD 625, SD 808, SD 810, SD 820, and SDX20, while processing firmware image signature, the internal buffer may overflow if the firmware signature size is large.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 52%
Affected Products (NVD)
VendorProductVersion
qualcommmdm9206_firmware
-
qualcommmdm9607_firmware
-
qualcommipq4019_firmware
-
qualcommipq8064_firmware
-
qualcommmdm9635m_firmware
-
qualcommmdm9640_firmware
-
qualcommmdm9645_firmware
-
qualcommmdm9650_firmware
-
qualcommqca4531_firmware
-
qualcommqca6174a_firmware
-
qualcommsd_210_firmware
-
qualcommsd_212_firmware
-
qualcommsd_205_firmware
-
qualcommqca6574au_firmware
-
qualcommqca6584_firmware
-
qualcommqca6584au_firmware
-
qualcommsd_425_firmware
-
qualcommqca9377_firmware
-
qualcommqca9378_firmware
-
qualcommqca9379_firmware
-
qualcommqca9558_firmware
-
qualcommqca9880_firmware
-
qualcommqca9886_firmware
-
qualcommsd_625_firmware
-
qualcommqca9980_firmware
-
qualcommsd_808_firmware
-
qualcommsd_810_firmware
-
qualcommsd_820_firmware
-
qualcommsdx20_firmware
-
𝑥
= Vulnerable software versions