← Back

CVE-2014-9789

nvd nist
Published: Jul 11, 2016Modified: May 6, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

The (1) alloc and (2) free APIs in arch/arm/mach-msm/qdsp6v2/msm_audio_ion.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices do not validate parameters, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28749392 and Qualcomm internal bug CR556425.

Affected (1)

Products: Google: Android
Google
1 product
Android
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Android
Up to 6.0.1

Related CWEs

CWE-264
CWE-264

References (6)

Source: security@android.com
Vendor Advisory
Source: security@android.com
Third Party AdvisoryVDB Entry
Source: security@android.com
Mailing ListPatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListPatchThird Party Advisory

Timeline

No history available yet.