Security Advisory

CVE-2014-9796

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2016-07-11 01:00:00

Last updated 2024-08-06 13:55:04

Assigner google_android

CVSS score not scored

State PUBLISHED

Description

app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices does not validate the page size in the kernel header, which allows attackers to bypass intended access restrictions via a crafted boot image, aka Android internal bug 28820722 and Qualcomm internal bug CR684756.

← Browse all CVEs View on cve.org ↗