CVE-2014-9779

High

Published: 11/07/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The Qualcomm components in Android before 2016-07-05 on Nexus 5 devices have a vulnerability that allows attackers to obtain sensitive information from kernel memory via a crafted offset.

Risk Assessment

This vulnerability may lead to the disclosure of confidential data, posing a serious threat to user security and system integrity.

Recommendation

It is recommended to update the Android system to the latest version to mitigate this vulnerability and to monitor the system for unauthorized access.

Other vulnerabilities in arch/arm/mach-msm/qdsp6v2/msm_audio_ion.c

CVE-2014-9789High
The alloc and free APIs in arch/arm/mach-msm/qdsp6v2/msm_audio_ion.c in Qualcomm components in Android before 2016-07-05 on Nexus 5 devices do not validate parameters, allowing attackers to gain privileges via a crafted application.

Original NVD description (English source)

arch/arm/mach-msm/qdsp6v2/msm_audio_ion.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allows attackers to obtain sensitive information from kernel memory via a crafted offset, aka Android internal bug 28598347 and Qualcomm internal bug CR548679.