Security Advisory

CVE-2014-4325

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2014-08-25 01:00:00
Last updated 2024-08-06 11:12:34
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

The cmd_boot function in app/aboot/aboot.c in the Little Kernel (LK) bootloader, as distributed with Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to bypass intended device-lock and kernel-signature restrictions by using fastboot mode in a boot command for an arbitrary kernel image.