CRITICAL🇵🇱 Wersja polska

CVE-2014-9985

CVSS 9.8v3.0pub. 2018-04-18upd. 2024-11-21

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9635M, SD 400, and SD 800, TOCTOU condition may result in bypassing error condition checks, leading to undefined behavior.

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Qualcomm Mdm9635m

    HW
    Qualcomm
    all versions

  • Qualcomm Mdm9635m Firmware

    OS
    Qualcomm
    all versions

  • Qualcomm Sd 400

    HW
    Qualcomm
    all versions

  • Qualcomm Sd 400 Firmware

    OS
    Qualcomm
    all versions

  • Qualcomm Sd 800

    HW
    Qualcomm
    all versions

  • Qualcomm Sd 800 Firmware

    OS
    Qualcomm
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2021-1916CRITICAL9.8PL ✓same product

Buffer underflow w układach Qualcomm Snapdragon — brak walidacji ujemnych indeksów

CVE-2021-1919CRITICAL9.8PL ✓same product

Integer underflow w obsłudze RTCP na chipsetach Qualcomm Snapdragon

CVE-2021-1920CRITICAL9.8PL ✓same product

Integer underflow w obsłudze pakietów RTCP w układach Qualcomm Snapdragon

CVE-2020-11166CRITICAL9.1PL ✓same product

Qualcomm Snapdragon: out-of-bounds read w dekompresji nagłówków ROHC

CVE-2020-11170CRITICAL9.8PL ✓same product

Qualcomm Snapdragon — out-of-bounds memory access w obsłudze plików Vorbis