CVE-2014-9998 In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear IPQ4019, IPQ8064, MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, Q...
CriticalCVSS 9.8
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear IPQ4019, IPQ8064, MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, QCA4531, QCA6174A, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9378, QCA9379, QCA9558, QCA9880, QCA9886, QCA9980, SD 210/SD 212/SD 205, SD 425, SD 625, SD 808, SD 810, SD 820, and SDX20, while processing firmware image signature, the internal buffer may overflow if the firmware signature size is large.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| qualcomm mdm9206 firmware | All versions | No fix listed |
| qualcomm mdm9607 firmware | All versions | No fix listed |
| qualcomm ipq4019 firmware | All versions | No fix listed |
| qualcomm ipq8064 firmware | All versions | No fix listed |
| qualcomm mdm9635m firmware | All versions | No fix listed |
| qualcomm mdm9640 firmware | All versions | No fix listed |
| qualcomm mdm9645 firmware | All versions | No fix listed |
| qualcomm mdm9650 firmware | All versions | No fix listed |
| qualcomm qca4531 firmware | All versions | No fix listed |
| qualcomm qca6174a firmware | All versions | No fix listed |
| qualcomm sd 210 firmware | All versions | No fix listed |
| qualcomm sd 212 firmware | All versions | No fix listed |
| qualcomm sd 205 firmware | All versions | No fix listed |
| qualcomm qca6574au firmware | All versions | No fix listed |
| qualcomm qca6584 firmware | All versions | No fix listed |
| qualcomm qca6584au firmware | All versions | No fix listed |
| qualcomm sd 425 firmware | All versions | No fix listed |
| qualcomm qca9377 firmware | All versions | No fix listed |
| qualcomm qca9378 firmware | All versions | No fix listed |
| qualcomm qca9379 firmware | All versions | No fix listed |
| qualcomm qca9558 firmware | All versions | No fix listed |
| qualcomm qca9880 firmware | All versions | No fix listed |
| qualcomm qca9886 firmware | All versions | No fix listed |
| qualcomm sd 625 firmware | All versions | No fix listed |
| qualcomm qca9980 firmware | All versions | No fix listed |
Show 5 more
| Product | Affected versions | Fixed in |
|---|---|---|
| qualcomm sd 808 firmware | All versions | No fix listed |
| qualcomm sd 810 firmware | All versions | No fix listed |
| qualcomm sd 820 firmware | All versions | No fix listed |
| qualcomm sdx20 firmware | All versions | No fix listed |
| qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear | = IPQ4019, IPQ8064, MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, QCA4531, QCA6174A, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9378, QCA9379, QCA9558, QCA9880, QCA9886, QCA9980, SD 210/SD 212/ | No fix listed |
References
- 103671 third-party-advisory vdb-entry
- source.android.com vendor-advisory