Non notée
CVE-2014-9995 In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 400 and SD 800, in…
Description
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 400 and SD 800, in drmprov_cmd_verify_key(), the variable feature_name_length is not validated. There is a check for feature_name_len + filePathLen but there might be an integer wrap when checking feature_name_len + filePathLen. This leads to a buffer overflow.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Snapdragon Mobile | Versions non publiées |
Références
- source.android.com source.android.com
- 103671 www.securityfocus.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Snapdragon Mobile
Les 114 CVE de Snapdragon Mobile →
CVE-2022-25691
Denial of service in Modem due to reachable assertion while processing SIB1 with invalid SCS and bandwidth settings in…
7.5
Élevée
CVE-2022-25673
Denial of service in MODEM due to reachable assertion while processing configuration from network in Snapdragon Mobile
7.5
Élevée
CVE-2022-25689
Denial of service in Modem due to reachable assertion in Snapdragon Mobile
7.5
Élevée
CVE-2022-25672
Denial of service in MODEM due to reachable assertion while processing SIB1 with invalid Bandwidth in Snapdragon Mobile
7.5
Élevée