Not rated
CVE-2014-9995 In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 400 and SD 800, in…
Description
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 400 and SD 800, in drmprov_cmd_verify_key(), the variable feature_name_length is not validated. There is a check for feature_name_len + filePathLen but there might be an integer wrap when checking feature_name_len + filePathLen. This leads to a buffer overflow.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Snapdragon Mobile | Versions not published |
References
- source.android.com source.android.com
- 103671 www.securityfocus.com
Timeline
- Published
- Last modified
Other CVEs of Snapdragon Mobile
The 114 CVEs of Snapdragon Mobile →
CVE-2022-25691
Denial of service in Modem due to reachable assertion while processing SIB1 with invalid SCS and bandwidth settings in…
7.5
High
CVE-2022-25673
Denial of service in MODEM due to reachable assertion while processing configuration from network in Snapdragon Mobile
7.5
High
CVE-2022-25689
Denial of service in Modem due to reachable assertion in Snapdragon Mobile
7.5
High
CVE-2022-25672
Denial of service in MODEM due to reachable assertion while processing SIB1 with invalid Bandwidth in Snapdragon Mobile
7.5
High